From 981609c28d1cadb73769c5a3714825f9ee06cd45 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 26 Feb 2026 01:05:01 +0000
Subject: [PATCH] deps(tools): bump actions/attest-build-provenance from 3 to 4

Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 3 to 4.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-build-provenance/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/main-server.yml | 2 +-
 .github/workflows/main-web.yml    | 2 +-
 .github/workflows/tags.yml        | 4 ++--
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/main-server.yml b/.github/workflows/main-server.yml
index a569a5c2..c5d46c1a 100644
--- a/.github/workflows/main-server.yml
+++ b/.github/workflows/main-server.yml
@@ -74,7 +74,7 @@ jobs:
           tags: ${{ env.GHCR_REGISTRY }}/${{ env.DOCKER_CONTAINER_NAME}}:latest,${{ env.DIGITALOCEAN_REGISTRY }}/${{ env.DOCKER_CONTAINER_NAME }}:latest
           labels: ${{ steps.meta.outputs.labels }}
       - name: Generate artifact attestation
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest-build-provenance@v4
         with:
           subject-name: ${{ env.GHCR_REGISTRY }}/${{ env.DOCKER_CONTAINER_NAME}}
           subject-digest: ${{ steps.push.outputs.digest }}
diff --git a/.github/workflows/main-web.yml b/.github/workflows/main-web.yml
index 81cf3ea6..30ef9753 100644
--- a/.github/workflows/main-web.yml
+++ b/.github/workflows/main-web.yml
@@ -93,7 +93,7 @@ jobs:
           tags: ${{ env.GHCR_REGISTRY }}/${{ env.DOCKER_CONTAINER_NAME}}:latest,${{ env.DIGITALOCEAN_REGISTRY }}/${{ env.DOCKER_CONTAINER_NAME }}:latest
           labels: ${{ steps.meta.outputs.labels }}
       - name: Generate artifact attestation
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest-build-provenance@v4
         with:
           subject-name: ${{ env.GHCR_REGISTRY }}/${{ env.DOCKER_CONTAINER_NAME}}
           subject-digest: ${{ steps.push.outputs.digest }}
diff --git a/.github/workflows/tags.yml b/.github/workflows/tags.yml
index ae272743..cde5b6e6 100644
--- a/.github/workflows/tags.yml
+++ b/.github/workflows/tags.yml
@@ -56,7 +56,7 @@ jobs:
           tags: ${{ env.GHCR_REGISTRY }}/${{ env.IMAGE_SERVER}}:latest,${{ env.DIGITALOCEAN_REGISTRY }}/${{ env.IMAGE_SERVER }}:latest
           labels: ${{ steps.metaserver.outputs.labels }}
       - name: Generate artifact attestation (Server)
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest-build-provenance@v4
         with:
           subject-name: ${{ env.GHCR_REGISTRY }}/${{ env.IMAGE_SERVER}}
           subject-digest: ${{ steps.pushserver.outputs.digest }}
@@ -77,7 +77,7 @@ jobs:
           tags: ${{ env.GHCR_REGISTRY }}/${{ env.IMAGE_WEBAPP}}:latest,${{ env.DIGITALOCEAN_REGISTRY }}/${{ env.IMAGE_WEBAPP }}:latest
           labels: ${{ steps.metaweb.outputs.labels }}
       - name: Generate artifact attestation (Web)
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest-build-provenance@v4
         with:
           subject-name: ${{ env.GHCR_REGISTRY }}/${{ env.IMAGE_WEBAPP}}
           subject-digest: ${{ steps.pushweb.outputs.digest }}