From 8e047ce409c996b44c73fd20debb425f295491b3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 4 Sep 2026 21:00:14 +0000
Subject: [PATCH] chore(deps): bump actions/attest from 3.0.0 to 4.2.2

Bumps [actions/attest](https://github.com/actions/attest) from 3.0.0 to 4.2.2.
- [Release notes](https://github.com/actions/attest/releases)
- [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest/compare/daf44fb950173508f38bd2406030372c1d1162b1...1e69f48acb82d1966a394da916b4c1698aa569d6)

---
updated-dependencies:
- dependency-name: actions/attest
  dependency-version: 4.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 action.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/action.yaml b/action.yaml
index f2c581d74..f0baf9833 100644
--- a/action.yaml
+++ b/action.yaml
@@ -213,7 +213,7 @@ runs:
 
   - name: Upload Attestation
     if: ${{ inputs.upload_attestation == 'true' && steps.collect-reports.outputs.vsa_generated == 'true' }}
-    uses: actions/attest@daf44fb950173508f38bd2406030372c1d1162b1 #3.0.0
+    uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 #4.2.2
     with:
       subject-path: ${{ inputs.subject_path }}
       predicate-type: https://slsa.dev/verification_summary/v1