From c10dcdbfdbcba8371792ec8ddbe3bed0f2407bcc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 8 Sep 2025 17:30:30 +0200 Subject: [PATCH] chore(deps): bump actions/attest-build-provenance from 2.4.0 to 3.0.0 (#1305) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/create_release_assets.yml | 4 ++-- .github/workflows/release_to_pypi.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/create_release_assets.yml b/.github/workflows/create_release_assets.yml index 16ee92ef..c8a6922f 100644 --- a/.github/workflows/create_release_assets.yml +++ b/.github/workflows/create_release_assets.yml @@ -130,7 +130,7 @@ jobs: files: assets/* - name: Generate artifact attestations - uses: actions/attest-build-provenance@v2.4.0 + uses: actions/attest-build-provenance@v3.0.0 with: subject-path: assets/* @@ -247,6 +247,6 @@ jobs: files: assets/* - name: Generate artifact attestations - uses: actions/attest-build-provenance@v2.4.0 + uses: actions/attest-build-provenance@v3.0.0 with: subject-path: assets/* diff --git a/.github/workflows/release_to_pypi.yml b/.github/workflows/release_to_pypi.yml index 2249d2da..cd080eb5 100644 --- a/.github/workflows/release_to_pypi.yml +++ b/.github/workflows/release_to_pypi.yml @@ -97,7 +97,7 @@ jobs: - uses: actions/download-artifact@v5.0.0 - name: Generate artifact attestation - uses: actions/attest-build-provenance@v2.4.0 + uses: actions/attest-build-provenance@v3.0.0 with: subject-path: 'wheels-*/*'