chore(deps): Update GitHub Actions

[williaby]

Summary

Why

Scheduled patch update, bug fixes and security patches with no API changes.

Changes

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
actions/attest-build-provenance	action	patch	v4.1.0 → v4.1.1
release-drafter/release-drafter	action	minor	v7.4.0 → v7.5.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Impact

• ✅ Patch update: bug fixes and security patches only
• ✅ No breaking changes

Acceptance Criteria

• All CI checks pass

Testing

• CI gates pass (tests, lint, type checking, security scan)

Notes

---

Release Notes

actions/attest-build-provenance (actions/attest-build-provenance)

v4.1.1

Compare Source

[!NOTE]
As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

• Update actions/attest to v4.1.1 by @​bdehamer in #​858

Full Changelog: actions/attest-build-provenance@v4.1.0...v4.1.1

release-drafter/release-drafter (release-drafter/release-drafter)

v7.5.1

Compare Source

What's Changed

Bug Fixes

• fix: use PR changed files as the source of truth for path filtering (#​1640) @​cchanche

Full Changelog: release-drafter/release-drafter@v7.5.0...v7.5.1

v7.5.0

Compare Source

What's Changed

New

• feat: align increments to semver lib from 0.0.0 (#​1636) @​cchanche

Bug Fixes

• fix: require actual matches for category mode only (#​1639) @​cchanche

Dependency Updates

• build(deps): bump undici from 6.24.1 to 6.27.0 (#​1637) @​dependabot[bot]

Full Changelog: release-drafter/release-drafter@v7.4.0...v7.5.0

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • "after 10pm every weekday,before 5am every weekday,every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[coderabbitai]

Walkthrough

The release-drafter/release-drafter GitHub Action in the release draft workflow is updated from the v7.4.0 commit pin to the v7.5.0 commit pin.

Changes

Release Drafter Action Bump

Layer / File(s)	Summary
release-drafter action pin update .github/workflows/release-drafter.yml	Bumps the pinned release-drafter/release-drafter action from v7.4.0 to v7.5.0.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• ByronWilliamsCPA/cookiecutter-python-template#40: Same file and action updated with a different version bump.
• ByronWilliamsCPA/cookiecutter-python-template#82: Same file and action updated with a different version bump.

Suggested labels

ci

🐇 A tiny hop, a version leap,
The drafter wakes from its v7.4 sleep.
Now pinned at five, the releases flow,
One line changed — watch the changelogs grow!
✨

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title is broadly related to the dependency update, though it doesn’t mention the specific GitHub Action changed.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/github-actions

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}