From c842a290acd4f569d7d7ab28579f0d0f25266f46 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 11 Sep 2024 10:47:44 +0200 Subject: [PATCH] Bump actions/attest-build-provenance from 1.4.1 to 1.4.3 in the github-actions group across 1 directory (#430) Bumps the github-actions group with 1 update in the / directory: [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance). --- .github/workflows/release-main.yml | 2 +- .github/workflows/release.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release-main.yml b/.github/workflows/release-main.yml index 912132b9..c98a0390 100644 --- a/.github/workflows/release-main.yml +++ b/.github/workflows/release-main.yml @@ -32,7 +32,7 @@ jobs: run: ./build.sh generateapichanges -s true - name: generate build provenance - uses: actions/attest-build-provenance@310b0a4a3b0b78ef57ecda988ee04b132db73ef8 # v1.4.1 + uses: actions/attest-build-provenance@1c608d11d69870c2092266b3f9a6f3abbf17002c # v1.4.3 with: subject-path: "${{ github.workspace }}/build/output/*.nupkg" diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7279da2e..6aad85dd 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -37,7 +37,7 @@ jobs: run: ./build.sh createreleaseongithub -s true --token ${{ secrets.GITHUB_TOKEN }} - name: generate build provenance - uses: actions/attest-build-provenance@310b0a4a3b0b78ef57ecda988ee04b132db73ef8 # v1.4.1 + uses: actions/attest-build-provenance@1c608d11d69870c2092266b3f9a6f3abbf17002c # v1.4.3 with: subject-path: "${{ github.workspace }}/build/output/*.nupkg"