From 5020f09fa165d246df0fcc5d6e32cf04523760e2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 25 Feb 2026 00:58:44 +0000
Subject: [PATCH] chore(deps): bump actions/attest from 3.0.0 to 3.2.0

Bumps [actions/attest](https://github.com/actions/attest) from 3.0.0 to 3.2.0.
- [Release notes](https://github.com/actions/attest/releases)
- [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest/compare/daf44fb950173508f38bd2406030372c1d1162b1...e59cbc1ad1ac2d59339667419eb8cdde6eb61e3d)

---
updated-dependencies:
- dependency-name: actions/attest
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 action.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/action.yaml b/action.yaml
index 418f37705..4c54edeb9 100644
--- a/action.yaml
+++ b/action.yaml
@@ -105,7 +105,7 @@ runs:
 
   - name: Upload Attestation
     if: ${{ inputs.upload_attestation == 'true' && steps.run-macaron-policy-verification.outputs.vsa_report != 'VSA Not Generated.' }}
-    uses: actions/attest@daf44fb950173508f38bd2406030372c1d1162b1 #3.0.0
+    uses: actions/attest@c32b4b8b198b65d0bd9d63490e847ff7b53989d4 #4.0.0
     with:
       subject-path: ${{ inputs.subject_path }}
       predicate-type: https://slsa.dev/verification_summary/v1