Skip to content

ci: bump actions/attest-build-provenance from 4.1.1 to 4.2.2 in the actions group across 1 directory - #4

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-7497132acf
Open

ci: bump actions/attest-build-provenance from 4.1.1 to 4.2.2 in the actions group across 1 directory#4
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-7497132acf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown

Bumps the actions group with 1 update in the / directory: actions/attest-build-provenance.

Updates actions/attest-build-provenance from 4.1.1 to 4.2.2

Release notes

Sourced from actions/attest-build-provenance's releases.

v4.2.2

[!NOTE] As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Full Changelog: actions/attest-build-provenance@v4.1.1...v4.2.2

Commits
  • 4d10147 Bump actions/attest from 4.2.0 to 4.2.1 in the actions-minor group (#862)
  • e3fe62e Bump the actions-minor group with 2 updates (#860)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Managing project's dependencies, packages and external tools github-actions CI workflows, actions, and runner configuration labels Aug 10, 2026
Bumps the actions group with 1 update in the / directory: [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance).


Updates `actions/attest-build-provenance` from 4.1.1 to 4.2.2
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@0f67c3f...4d10147)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-version: 4.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title ci: bump actions/attest-build-provenance from 4.1.1 to 4.2.2 in the actions group ci: bump actions/attest-build-provenance from 4.1.1 to 4.2.2 in the actions group across 1 directory Aug 17, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-7497132acf branch from 5e6547d to 6aefef3 Compare August 17, 2026 06:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Managing project's dependencies, packages and external tools github-actions CI workflows, actions, and runner configuration

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants