Skip to content

chore(deps): bump actions/attest-build-provenance from 1 to 4 - #500

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/attest-build-provenance-4
Open

chore(deps): bump actions/attest-build-provenance from 1 to 4#500
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/attest-build-provenance-4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/attest-build-provenance from 1 to 4.

Release notes

Sourced from actions/attest-build-provenance's releases.

v4.0.0

[!NOTE] As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Full Changelog: actions/attest-build-provenance@v3.2.0...v4.0.0

v3.2.0

What's Changed

Full Changelog: actions/attest-build-provenance@v3.1.0...v3.2.0

v3.1.0

What's Changed

New Contributors

Full Changelog: actions/attest-build-provenance@v3...v3.1.0

v3.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1 Release Notes

Make sure your runner is updated to this version or newer to use this release.

... (truncated)

Commits

@dependabot @github

dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel

vercel Bot commented Jul 1, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
sin-code Ready Ready Preview, Comment, Open in v0 Jul 28, 2026 4:06pm

@github-actions

github-actions Bot commented Jul 1, 2026

Copy link
Copy Markdown

🏆 CEO Audit — A (92.0/100)

Metric Value
Grade A
Score 92.0/100
Critical findings 0
High findings 0
Profile QUICK
Min grade gate B

📥 Download full report (Markdown)
📊 Download SARIF (for Code Scanning)

Run skills/code-skills/skill-code-ceo-audit/scripts/audit.sh . --profile=QUICK locally to reproduce.

@github-actions

github-actions Bot commented Jul 1, 2026

Copy link
Copy Markdown

🏆 CEO Audit — A (92.0/100)

Metric Value
Grade A
Score 92.0/100
Critical findings 0
High findings 0
Medium findings 2
Profile QUICK
Min grade gate B

📥 Download full report (Markdown)

Run ID: 30376650695 · Commit: ${github.sha}

Run skills/code-skills/skill-code-ceo-audit/scripts/audit.sh . --profile=QUICK locally to reproduce.

Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 1 to 4.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@v1...v4)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/attest-build-provenance-4 branch from 1b5c0f9 to b329e81 Compare July 28, 2026 16:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants