From 5457e526f55a7233ff4ffd7a9683de04a8eeda42 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 20 Jul 2026 05:12:04 +0000 Subject: [PATCH 1/2] chore(deps): bump actions/attest from 4.1.1 to 4.2.0 Bumps [actions/attest](https://github.com/actions/attest) from 4.1.1 to 4.2.0. - [Release notes](https://github.com/actions/attest/releases) - [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest/compare/a1948c3f048ba23858d222213b7c278aabede763...f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6) --- updated-dependencies: - dependency-name: actions/attest dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/release-dev.yml | 2 +- .github/workflows/release-tag.yml | 2 +- .github/workflows/release-vm-kernel.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release-dev.yml b/.github/workflows/release-dev.yml index 82b5b2a116..153b893c0c 100644 --- a/.github/workflows/release-dev.yml +++ b/.github/workflows/release-dev.yml @@ -916,7 +916,7 @@ jobs: cat release/openshell.rb - name: Attest VM driver artifacts - uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4 + uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4 with: subject-path: | release/openshell-driver-vm-x86_64-unknown-linux-gnu.tar.gz diff --git a/.github/workflows/release-tag.yml b/.github/workflows/release-tag.yml index ca63a69923..739daea07f 100644 --- a/.github/workflows/release-tag.yml +++ b/.github/workflows/release-tag.yml @@ -974,7 +974,7 @@ jobs: cat release/openshell.rb - name: Attest VM driver artifacts - uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4 + uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4 with: subject-path: | release/*.tar.gz diff --git a/.github/workflows/release-vm-kernel.yml b/.github/workflows/release-vm-kernel.yml index cf86d0b46f..46187a1691 100644 --- a/.github/workflows/release-vm-kernel.yml +++ b/.github/workflows/release-vm-kernel.yml @@ -186,7 +186,7 @@ jobs: merge-multiple: true - name: Attest VM runtime artifacts - uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4 + uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4 with: subject-path: | release/vm-runtime-linux-aarch64.tar.zst From f689dc31e38f67644a30a00d5509c7220f49d6f2 Mon Sep 17 00:00:00 2001 From: Evan Lezar Date: Mon, 20 Jul 2026 15:51:34 +0200 Subject: [PATCH 2/2] chore(deps): note actions attest release version Signed-off-by: Evan Lezar --- .github/workflows/release-dev.yml | 2 +- .github/workflows/release-tag.yml | 2 +- .github/workflows/release-vm-kernel.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release-dev.yml b/.github/workflows/release-dev.yml index 153b893c0c..9d4a71f19f 100644 --- a/.github/workflows/release-dev.yml +++ b/.github/workflows/release-dev.yml @@ -916,7 +916,7 @@ jobs: cat release/openshell.rb - name: Attest VM driver artifacts - uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4 + uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0 with: subject-path: | release/openshell-driver-vm-x86_64-unknown-linux-gnu.tar.gz diff --git a/.github/workflows/release-tag.yml b/.github/workflows/release-tag.yml index 739daea07f..231ff20c7b 100644 --- a/.github/workflows/release-tag.yml +++ b/.github/workflows/release-tag.yml @@ -974,7 +974,7 @@ jobs: cat release/openshell.rb - name: Attest VM driver artifacts - uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4 + uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0 with: subject-path: | release/*.tar.gz diff --git a/.github/workflows/release-vm-kernel.yml b/.github/workflows/release-vm-kernel.yml index 46187a1691..cf49e8687c 100644 --- a/.github/workflows/release-vm-kernel.yml +++ b/.github/workflows/release-vm-kernel.yml @@ -186,7 +186,7 @@ jobs: merge-multiple: true - name: Attest VM runtime artifacts - uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4 + uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0 with: subject-path: | release/vm-runtime-linux-aarch64.tar.zst