Upgrade: [dependabot] - bump actions/attest-build-provenance from 3.2.0 to 4.1.0#36
Conversation
dependabot
bot
added
dependencies
|
This PR is raised by Dependabot to update a dependency. |
|
I'm not approving this PR because it includes a major update of a dependency used in production |
dependabot
bot
force-pushed
the
dependabot/github_actions/actions/attest-build-provenance-4.1.0
branch
from
5b57a08 to
4572778
Compare
|
I'm not approving this PR because it includes a major update of a dependency used in production |
dependabot
bot
force-pushed
the
dependabot/github_actions/actions/attest-build-provenance-4.1.0
branch
from
4572778 to
d26a5f6
Compare
|
I'm not approving this PR because it includes a major update of a dependency used in production |
dependabot
bot
force-pushed
the
dependabot/github_actions/actions/attest-build-provenance-4.1.0
branch
from
d26a5f6 to
d5b307d
Compare
|
I'm not approving this PR because it includes a major update of a dependency used in production |
dependabot
bot
force-pushed
the
dependabot/github_actions/actions/attest-build-provenance-4.1.0
branch
from
d5b307d to
11ec2c0
Compare
|
I'm not approving this PR because it includes a major update of a dependency used in production |
dependabot
bot
force-pushed
the
dependabot/github_actions/actions/attest-build-provenance-4.1.0
branch
from
11ec2c0 to
217bfe7
Compare
|
I'm not approving this PR because it includes a major update of a dependency used in production |
dependabot
bot
force-pushed
the
dependabot/github_actions/actions/attest-build-provenance-4.1.0
branch
from
217bfe7 to
9ff017f
Compare
|
I'm not approving this PR because it includes a major update of a dependency used in production |
dependabot
bot
force-pushed
the
dependabot/github_actions/actions/attest-build-provenance-4.1.0
branch
from
9ff017f to
87ce9a9
Compare
|
I'm not approving this PR because it includes a major update of a dependency used in production |
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 3.2.0 to 4.1.0. - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](actions/attest-build-provenance@96278af...a2bbfa2) --- updated-dependencies: - dependency-name: actions/attest-build-provenance dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
force-pushed
the
dependabot/github_actions/actions/attest-build-provenance-4.1.0
branch
from
87ce9a9 to
c221301
Compare
|
I'm not approving this PR because it includes a major update of a dependency used in production |
Bumps actions/attest-build-provenance from 3.2.0 to 4.1.0.
Release notes
Sourced from actions/attest-build-provenance's releases.
Commits
a2bbfa2bump actions/attest from 4.0.0 to 4.1.0 (#838)0856891update RELEASE.md docs (#836)e4d4f7cprepare v4 release (#835)02a49bdBump github/codeql-action in the actions-minor group (#824)7c757dfBump the npm-development group with 2 updates (#825)c44148eBump github/codeql-action in the actions-minor group (#818)3234352Bump@types/nodefrom 25.0.10 to 25.2.0 in the npm-development group (#819)18db129Bump tar from 7.5.6 to 7.5.7 (#816)90fadfaBump@actions/corefrom 2.0.1 to 2.0.2 in the npm-production group (#799)57db8baBump the npm-development group across 1 directory with 3 updates (#808)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)