Skip to content

build(deps): bump actions/attest from 36051bcae73b7c2a8a6945a48cbf80953c6baa35 to f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 - #3

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions/attest-f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions/attest-f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 26, 2026 •

Copy link
Copy Markdown

Bumps actions/attest from 36051bcae73b7c2a8a6945a48cbf80953c6baa35 to f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6.

Changelog

Sourced from actions/attest's changelog.

Release Instructions

Follow the steps below to tag a new release for the actions/attest action.

  1. Update the version field in package.json.

  2. Merge the latest changes to the main branch.

  3. Create a new release using a tag of the form vX.X.X following SemVer conventions:

    gh release create vX.X.X
  4. Move (or create) the major version tag to point to the same commit tagged above:

    git tag -fa vX -m "vX"
    git push origin vX --force
  5. As appropriate, update any actions like actions/attest-build-provenance and actions/attest-sbom which have a dependency on actions/attest

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 26, 2026
Bumps [actions/attest](https://github.com/actions/attest) from 36051bcae73b7c2a8a6945a48cbf80953c6baa35 to f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6.
- [Release notes](https://github.com/actions/attest/releases)
- [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md)
- [Commits](actions/attest@36051bc...f7c74d2)

---
updated-dependencies:
- dependency-name: actions/attest
  dependency-version: f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/attest-f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 branch from f7167fc to 61e49f0 Compare July 26, 2026 07:53
@cbhandsun
cbhandsun force-pushed the dependabot/github_actions/actions/attest-f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 branch from 61e49f0 to 3733ead Compare October 23, 2026 00:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants