Merge pull request #12795 from cli/dependabot/github_actions/actions/attest-build-provenance-4.1.0

chore(deps): bump actions/attest-build-provenance from 3.2.0 to 4.1.0
This commit is contained in:
Kynan Ware 2026-03-02 09:26:34 -07:00 committed by GitHub
commit 453d89c2d4
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -334,7 +334,7 @@ jobs:
rpmsign --addsign dist/*.rpm
- name: Attest release artifacts
if: inputs.environment == 'production'
uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0
uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
with:
subject-path: "dist/gh_*"
create-storage-record: false # (default: true)