Skip to content

chore: bump actions/attest from 4.2.0 to 4.2.2 in the github-actions group across 1 directory - #20

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-64f2eff7fa
Open

chore: bump actions/attest from 4.2.0 to 4.2.2 in the github-actions group across 1 directory#20
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-64f2eff7fa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 1 update in the / directory: actions/attest.

Updates actions/attest from 4.2.0 to 4.2.2

Release notes

Sourced from actions/attest's releases.

v4.2.2

What's Changed

Full Changelog: actions/attest@v4.2.1...v4.2.2

v4.2.1

What's Changed

Full Changelog: actions/attest@v4.2.0...v4.2.1

Commits
  • 1e69f48 Bump ip-address from 10.2.0 to 10.4.0 (#467)
  • 02787ce Bump brace-expansion (#468)
  • 98ac037 bump @​sigstore/oci from 0.7.1 to 0.7.2 (#469)
  • 508db95 fix: strip OCI image tag when pushing attestation to registry (#464)
  • dda48f2 Bump the npm-development group across 1 directory with 6 updates (#461)
  • 7d789a3 Bump the actions-minor group with 3 updates (#463)
  • 1f3ca2f Add release-cutter canvas extension (#454)
  • d215549 Bump tar from 7.5.17 to 7.5.21 (#459)
  • 20c90ed Bump the npm-development group with 2 updates (#455)
  • 43c2c81 Bump the actions-minor group with 4 updates (#456)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the internal label Aug 14, 2026
Bumps the github-actions group with 1 update in the / directory: [actions/attest](https://github.com/actions/attest).


Updates `actions/attest` from 4.2.0 to 4.2.2
- [Release notes](https://github.com/actions/attest/releases)
- [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md)
- [Commits](actions/attest@f7c74d2...1e69f48)

---
updated-dependencies:
- dependency-name: actions/attest
  dependency-version: 4.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore: bump actions/attest from 4.2.0 to 4.2.2 in the github-actions group chore: bump actions/attest from 4.2.0 to 4.2.2 in the github-actions group across 1 directory Aug 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-64f2eff7fa branch from cad86f3 to 5aca3ae Compare August 28, 2026 06:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants