From 2575585b455c97c4164031f00a56a90c428ef8ed Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 20 Jul 2026 20:49:03 +0000 Subject: [PATCH] chore(deps): bump actions/attest from 4.1.1 to 4.2.0 (#2357) * chore(deps): bump actions/attest from 4.1.1 to 4.2.0 Bumps [actions/attest](https://github.com/actions/attest) from 4.1.1 to 4.2.0. - [Release notes](https://github.com/actions/attest/releases) - [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest/compare/a1948c3f048ba23858d222213b7c278aabede763...f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6) --- updated-dependencies: - dependency-name: actions/attest dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] * chore(deps): note actions attest release version Signed-off-by: Evan Lezar --------- Signed-off-by: dependabot[bot] Signed-off-by: Evan Lezar Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Evan Lezar --- .github/workflows/release-dev.yml | 2 +- .github/workflows/release-tag.yml | 2 +- .github/workflows/release-vm-kernel.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release-dev.yml b/.github/workflows/release-dev.yml index 615c630b8..901f14d2b 100644 --- a/.github/workflows/release-dev.yml +++ b/.github/workflows/release-dev.yml @@ -920,7 +920,7 @@ jobs: cat release/openshell.rb - name: Attest VM driver artifacts - uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4 + uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0 with: subject-path: | release/openshell-driver-vm-x86_64-unknown-linux-gnu.tar.gz diff --git a/.github/workflows/release-tag.yml b/.github/workflows/release-tag.yml index ee4fbffbe..005874a8b 100644 --- a/.github/workflows/release-tag.yml +++ b/.github/workflows/release-tag.yml @@ -978,7 +978,7 @@ jobs: cat release/openshell.rb - name: Attest VM driver artifacts - uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4 + uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0 with: subject-path: | release/*.tar.gz diff --git a/.github/workflows/release-vm-kernel.yml b/.github/workflows/release-vm-kernel.yml index cf86d0b46..cf49e8687 100644 --- a/.github/workflows/release-vm-kernel.yml +++ b/.github/workflows/release-vm-kernel.yml @@ -186,7 +186,7 @@ jobs: merge-multiple: true - name: Attest VM runtime artifacts - uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4 + uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0 with: subject-path: | release/vm-runtime-linux-aarch64.tar.zst