Skip to content

chore(deps): bump actions/attest from 4.1.1 to 4.2.1 in the github-actions group across 1 directory - #4

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-63eec690d2
Open

chore(deps): bump actions/attest from 4.1.1 to 4.2.1 in the github-actions group across 1 directory#4
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-63eec690d2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 1 update in the / directory: actions/attest.

Updates actions/attest from 4.1.1 to 4.2.1

Release notes

Sourced from actions/attest's releases.

v4.2.1

What's Changed

Full Changelog: actions/attest@v4.2.0...v4.2.1

v4.2.0

What's Changed

Full Changelog: actions/attest@v4.1.1...v4.2.0

Commits
  • 508db95 fix: strip OCI image tag when pushing attestation to registry (#464)
  • dda48f2 Bump the npm-development group across 1 directory with 6 updates (#461)
  • 7d789a3 Bump the actions-minor group with 3 updates (#463)
  • 1f3ca2f Add release-cutter canvas extension (#454)
  • d215549 Bump tar from 7.5.17 to 7.5.21 (#459)
  • 20c90ed Bump the npm-development group with 2 updates (#455)
  • 43c2c81 Bump the actions-minor group with 4 updates (#456)
  • f1d64fb Bump actions/setup-node from 6.4.0 to 7.0.0 (#457)
  • f7c74d2 feat: support SHA-2 subject digests (#446)
  • 88633d1 Bump js-yaml from 4.2.0 to 5.2.1 (#452)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 20, 2026
@dependabot dependabot Bot changed the title chore(deps): bump actions/attest from 4.1.1 to 4.2.0 in the github-actions group chore(deps): bump actions/attest from 4.1.1 to 4.2.0 in the github-actions group across 1 directory Jul 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-63eec690d2 branch from 29886f0 to e2ef512 Compare July 27, 2026 07:45
@dependabot dependabot Bot changed the title chore(deps): bump actions/attest from 4.1.1 to 4.2.0 in the github-actions group across 1 directory chore(deps): bump actions/attest from 4.1.1 to 4.2.1 in the github-actions group across 1 directory Aug 3, 2026
Bumps the github-actions group with 1 update in the / directory: [actions/attest](https://github.com/actions/attest).


Updates `actions/attest` from 4.1.1 to 4.2.1
- [Release notes](https://github.com/actions/attest/releases)
- [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md)
- [Commits](actions/attest@a1948c3...508db95)

---
updated-dependencies:
- dependency-name: actions/attest
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-63eec690d2 branch from e2ef512 to 2070cd2 Compare August 3, 2026 07:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants