Skip to content

build(deps): bump actions/attest-build-provenance from 3.0.0 to 4.2.2 - #177

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions/attest-build-provenance-977bb373ede98d70efdf65b84cb5f73e068dcc2a
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions/attest-build-provenance-977bb373ede98d70efdf65b84cb5f73e068dcc2a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 6, 2026 •

Copy link
Copy Markdown
Contributor

Bumps actions/attest-build-provenance from 3.0.0 to 4.2.2.

Release notes

Sourced from actions/attest-build-provenance's releases.

v4.2.2

[!NOTE] As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Full Changelog: actions/attest-build-provenance@v4.1.1...v4.2.2

v4.1.1

[!NOTE] As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Full Changelog: actions/attest-build-provenance@v4.1.0...v4.1.1

v4.1.0

[!NOTE] As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Full Changelog: actions/attest-build-provenance@v4.0.0...v4.1.0

v4.0.0

[!NOTE] As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 6, 2026
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 3.0.0 to 4.2.2.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@977bb37...4d10147)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-version: 977bb373ede98d70efdf65b84cb5f73e068dcc2a
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump actions/attest-build-provenance from 43d14bc2b83dec42d39ecae14e916627a18bb661 to 977bb373ede98d70efdf65b84cb5f73e068dcc2a build(deps): bump actions/attest-build-provenance from 3.0.0 to 4.2.2 Oct 6, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/attest-build-provenance-977bb373ede98d70efdf65b84cb5f73e068dcc2a branch from 862b13f to 1077700 Compare October 6, 2026 10:41
@dependabot @github

dependabot Bot commented on behalf of github Oct 6, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #180.

@dependabot dependabot Bot closed this Oct 6, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions/attest-build-provenance-977bb373ede98d70efdf65b84cb5f73e068dcc2a branch October 6, 2026 10:41
@fergusstrange

Copy link
Copy Markdown
Owner

The attestation update is incorporated in #179, preserving Dependabot authorship. The master release exercised the updated action, and all twelve published assets passed gh attestation verify against the exact master source commit and this repository’s release workflow. Closing this PR as incorporated; if your provenance-verification workflow needs anything beyond this, please describe the expectation so we can check it.

Validated in the master release workflow, which published v2.0.0-alpha.2.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant