Skip to content

ci: bump actions/attest-build-provenance from 3 to 4 - #166

Merged
castdrian merged 1 commit into
devfrom
dependabot/github_actions/dev/actions/attest-build-provenance-4
Oct 27, 2026
Merged

castdrian merged 1 commit into
devfrom
dependabot/github_actions/dev/actions/attest-build-provenance-4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 27, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/attest-build-provenance from 3 to 4.

Release notes

Sourced from actions/attest-build-provenance's releases.

v4.0.0

[!NOTE] As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Full Changelog: actions/attest-build-provenance@v3.2.0...v4.0.0

v3.2.0

What's Changed

Full Changelog: actions/attest-build-provenance@v3.1.0...v3.2.0

v3.1.0

What's Changed

New Contributors

Full Changelog: actions/attest-build-provenance@v3...v3.1.0

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 3 to 4.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@v3...v4)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from castdrian as a code owner October 27, 2026 00:56
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 27, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Code coverage

Area Files Lines Coverage Minimum
App 1 72 / 150 48.0%
Automation 5 471 / 796 59.2%
CLI 3 298 / 337 88.4%
Capture 64 3781 / 9885 38.2% 23.0% met
Editor 32 4430 / 7472 59.3%
Extensions 3 0 / 99 0.0%
Http 47 4236 / 5839 72.5% 70.0% met
ISCU 10 1078 / 1221 88.3% 80.0% met
Intents 3 79 / 335 23.6%
LocalShare 3 511 / 671 76.2%
Models 9 533 / 606 88.0%
Packages 8 720 / 749 96.1%
Preferences 1 11 / 17 64.7%
Recording 33 2748 / 8290 33.1%
Share Extension 1 0 / 202 0.0%
Shared 2 42 / 74 56.8%
Shelf 4 185 / 932 19.8%
Sync 3 276 / 442 62.4%
Util 50 2644 / 6930 38.2%
Views 75 2396 / 18274 13.1%
Widgets 3 0 / 224 0.0%
Total 360 24511 / 63545 38.6%

Every coverage minimum is met.

Measured on b1b69d0.

@castdrian
castdrian merged commit 192bad9 into dev Oct 27, 2026
11 checks passed
@castdrian
castdrian deleted the dependabot/github_actions/dev/actions/attest-build-provenance-4 branch October 27, 2026 15:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant