From f513c9a0a7f8c1dca422c0784038ff9a230a6df6 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 21 Aug 2026 04:48:09 +0000 Subject: [PATCH] chore(deps): update actions/attest-build-provenance digest to 4d10147 --- .github/workflows/release-please.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index 0104ebc..261ce95 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -95,7 +95,7 @@ jobs: # commit (Sigstore-backed, keyless — no secrets to manage). Verify with: # gh attestation verify -R ${{ github.repository }} - name: Attest build provenance - uses: actions/attest-build-provenance@8beda2b7ed98355c0e97c0a63bec38ae472e66c4 # v4 + uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4 with: subject-path: '*.vsix, sbom.cdx.json'