Skip to content

chore(deps): Bump actions/attest from 4.1.0 to 4.2.1 - #330

Merged
aseyboldt merged 1 commit into
mainfrom
dependabot/github_actions/actions/attest-4.1.1
Aug 6, 2026
Merged

chore(deps): Bump actions/attest from 4.1.0 to 4.2.1#330
aseyboldt merged 1 commit into
mainfrom
dependabot/github_actions/actions/attest-4.1.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 6, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/attest from 4.1.0 to 4.2.1.

Release notes

Sourced from actions/attest's releases.

v4.2.1

What's Changed

Full Changelog: actions/attest@v4.2.0...v4.2.1

v4.2.0

What's Changed

Full Changelog: actions/attest@v4.1.1...v4.2.0

v4.1.1

What's Changed

Full Changelog: actions/attest@v4.1.0...v4.1.1

Commits
  • 508db95 fix: strip OCI image tag when pushing attestation to registry (#464)
  • dda48f2 Bump the npm-development group across 1 directory with 6 updates (#461)
  • 7d789a3 Bump the actions-minor group with 3 updates (#463)
  • 1f3ca2f Add release-cutter canvas extension (#454)
  • d215549 Bump tar from 7.5.17 to 7.5.21 (#459)
  • 20c90ed Bump the npm-development group with 2 updates (#455)
  • 43c2c81 Bump the actions-minor group with 4 updates (#456)
  • f1d64fb Bump actions/setup-node from 6.4.0 to 7.0.0 (#457)
  • f7c74d2 feat: support SHA-2 subject digests (#446)
  • 88633d1 Bump js-yaml from 4.2.0 to 5.2.1 (#452)
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@aseyboldt

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps [actions/attest](https://github.com/actions/attest) from 4.1.0 to 4.2.1.
- [Release notes](https://github.com/actions/attest/releases)
- [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md)
- [Commits](actions/attest@59d8942...508db95)

---
updated-dependencies:
- dependency-name: actions/attest
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): Bump actions/attest from 4.1.0 to 4.1.1 chore(deps): Bump actions/attest from 4.1.0 to 4.2.1 Aug 5, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/attest-4.1.1 branch from 17a8795 to d10005b Compare August 5, 2026 16:51
@aseyboldt
aseyboldt merged commit b14dc3c into main Aug 6, 2026
50 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions/attest-4.1.1 branch August 6, 2026 09:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant