aRustyDev / aRustyDev/gh

deps: ci: bump actions/attest-build-provenance from 2 to 4

Open
#62 0 comments 0 reactions 0 assignees View on GitHub
dependencies github-actions
Dominant language
Shell
Stars
0
Forks
0
No merged PRs in 30d

Description

## Dependabot Update

Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 2 to 4.

Release notes

Sourced from actions/attest-build-provenance's releases.



v4.0.0



[!NOTE]
As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.


Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.



What's Changed



Full Changelog: https://github.com/actions/attest-build-provenance/compare/v3.2.0...v4.0.0


v3.2.0


What's Changed



Full Changelog: https://github.com/actions/attest-build-provenance/compare/v3.1.0...v3.2.0


v3.1.0


What's Changed



New Contributors



Full Changelog: https://github.com/actions/attest-build-provenance/compare/v3...v3.1.0


v3.0.0


What's Changed



⚠️ Minimum Compatible Runner Version


v2.327.1
Release Notes


Make sure your runner is updated to this version or newer to use this release.


... (truncated)

Commits


  • a2bbfa2 bump actions/attest from 4.0.0 to 4.1.0 (#838)

  • 0856891 update RELEASE.md docs (#836)

  • e4d4f7c prepare v4 release (#835)

  • 02a49bd Bump github/codeql-action in the actions-minor group (#824)

  • 7c757df Bump the npm-development group with 2 updates (#825)

  • c44148e Bump github/codeql-action in the actions-minor group (#818)

  • 3234352 Bump @​types/node from 25.0.10 to 25.2.0 in the npm-development group (#819)

  • 18db129 Bump tar from 7.5.6 to 7.5.7 (#816)

  • 90fadfa Bump @​actions/core from 2.0.1 to 2.0.2 in the npm-production group (#799)

  • 57db8ba Bump the npm-development group across 1 directory with 3 updates (#808)

  • Additional commits viewable in compare view


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/attest-build-provenance&package-manager=github_actions&previous-version=2&new-version=4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

## Pull Request

- PR: #61
- Author: @dependabot[bot]
- URL: https://github.com/aRustyDev/gh/pull/61

---
This issue was automatically created to track the Dependabot update.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.