From 2150797a0ff7dc9e7f5bed33c101ab454d598485 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 2 Mar 2026 12:19:32 +0000
Subject: [PATCH] chore(deps): bump actions/attest from 3.0.0 to 4.1.0

Bumps [actions/attest](https://github.com/actions/attest) from 3.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/attest/releases)
- [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest/compare/daf44fb950173508f38bd2406030372c1d1162b1...59d89421af93a897026c735860bf21b6eb4f7b26)

---
updated-dependencies:
- dependency-name: actions/attest
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 action.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/action.yaml b/action.yaml
index 418f37705..0e1f0f46d 100644
--- a/action.yaml
+++ b/action.yaml
@@ -105,7 +105,7 @@ runs:
 
   - name: Upload Attestation
     if: ${{ inputs.upload_attestation == 'true' && steps.run-macaron-policy-verification.outputs.vsa_report != 'VSA Not Generated.' }}
-    uses: actions/attest@daf44fb950173508f38bd2406030372c1d1162b1 #3.0.0
+    uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 #4.1.0
     with:
       subject-path: ${{ inputs.subject_path }}
       predicate-type: https://slsa.dev/verification_summary/v1