Skip to content

build(deps): bump actions/attest from 4.1.0 to 4.2.0 - #413

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions/attest-4.1.1
Closed

build(deps): bump actions/attest from 4.1.0 to 4.2.0#413
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions/attest-4.1.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 3, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/attest from 4.1.0 to 4.2.0.

Release notes

Sourced from actions/attest's releases.

v4.2.0

What's Changed

Full Changelog: actions/attest@v4.1.1...v4.2.0

v4.1.1

What's Changed

Full Changelog: actions/attest@v4.1.0...v4.1.1

Commits
  • f7c74d2 feat: support SHA-2 subject digests (#446)
  • 88633d1 Bump js-yaml from 4.2.0 to 5.2.1 (#452)
  • 5dff824 Bump the actions-minor group with 3 updates (#453)
  • e67e539 Bump the npm-development group across 1 directory with 2 updates (#448)
  • 95f6155 Bump @​types/node from 25.9.2 to 26.1.1 (#449)
  • b644c72 Read subjects from GITHUB_ARTIFACTS_LIST (#447)
  • 7d3af28 Bump csv-parse from 6.2.1 to 7.0.1 (#437)
  • 52cbb4d Bump @​actions/glob from 0.6.1 to 0.7.0 in the npm-production group across 1 d...
  • a5ce33e ci: download rebuilt dist/ artifact outside the checkout workspace (#445)
  • 4c65731 ci: auto-rebuild dist/ for Dependabot production bumps (#444)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 3, 2026
@dependabot
dependabot Bot requested a review from YMRYMR as a code owner July 3, 2026 02:23
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 3, 2026
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

Bumps [actions/attest](https://github.com/actions/attest) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/actions/attest/releases)
- [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md)
- [Commits](actions/attest@59d8942...f7c74d2)

---
updated-dependencies:
- dependency-name: actions/attest
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump actions/attest from 4.1.0 to 4.1.1 build(deps): bump actions/attest from 4.1.0 to 4.2.0 Jul 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/attest-4.1.1 branch from 1959706 to 7191c8d Compare July 27, 2026 09:12
@dependabot @github

dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #418.

@dependabot dependabot Bot closed this Jul 31, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions/attest-4.1.1 branch July 31, 2026 02:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants