Skip to content

chore(deps): update actions/attest-build-provenance action to v4#3012

Merged
plengauer merged 1 commit intomainfrom
renovate/actions-attest-build-provenance-4.x
Mar 3, 2026
Merged

chore(deps): update actions/attest-build-provenance action to v4#3012
plengauer merged 1 commit intomainfrom
renovate/actions-attest-build-provenance-4.x

Conversation

@plengauer
Copy link
Owner

@plengauer plengauer commented Feb 25, 2026

This PR contains the following updates:

Package Type Update Change
actions/attest-build-provenance action major v3.2.0v4.1.0

Release Notes

actions/attest-build-provenance (actions/attest-build-provenance)

v4.1.0

Compare Source

[!NOTE]
As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Full Changelog: actions/attest-build-provenance@v4.0.0...v4.1.0

v4.0.0

Compare Source

[!NOTE]
As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Full Changelog: actions/attest-build-provenance@v3.2.0...v4.0.0


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@plengauer plengauer requested a review from moflwi as a code owner February 25, 2026 23:13
Copilot AI review requested due to automatic review settings February 25, 2026 23:13
@plengauer plengauer enabled auto-merge (squash) February 25, 2026 23:13
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the provenance attestation step in the release publishing workflow to the latest major version, keeping the project’s release supply-chain metadata generation current.

Changes:

  • Bump actions/attest-build-provenance from v3.2.0 to v4.0.0 for .deb, .rpm, and .apk artifacts in the publish workflow.

@plengauer plengauer force-pushed the renovate/actions-attest-build-provenance-4.x branch from eda4e7d to ecb9573 Compare February 26, 2026 23:13
@plengauer plengauer force-pushed the renovate/actions-attest-build-provenance-4.x branch from ecb9573 to 72d49ee Compare February 27, 2026 02:08
@plengauer plengauer merged commit d83dff8 into main Mar 3, 2026
1646 of 1656 checks passed
@plengauer plengauer deleted the renovate/actions-attest-build-provenance-4.x branch March 3, 2026 17:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants