chore(deps): bump actions/attest-build-provenance from 3.2.0 to 4.0.0 (#21234)

* chore(deps): bump actions/attest-build-provenance from 3.2.0 to 4.0.0

Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 3.2.0 to 4.0.0.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](96278af6ca...e4d4f7c39a)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore: replace actions/attest-build-provenance with actions/attest

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This commit is contained in:
dependabot[bot] 2026-02-26 23:39:28 +08:00 committed by GitHub
parent 4523ee8b35
commit a108cd625e
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 31 additions and 47 deletions

View File

@ -118,7 +118,7 @@ jobs:
outputs: type=image,compression=zstd,force-compression=true,push-by-digest=true,name-canonical=true,push=true
- name: Attest (ordinary version)
uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0
uses: actions/attest@c32b4b8b198b65d0bd9d63490e847ff7b53989d4 # v4.0.0
with:
subject-name: |
${{ vars.DOCKER_USERNAME }}/${{ steps.repo-name.outputs.repo-name }}
@ -173,7 +173,7 @@ jobs:
outputs: type=image,compression=zstd,force-compression=true,push-by-digest=true,name-canonical=true,push=true
- name: Attest (Chromium-bundled version)
uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0
uses: actions/attest@c32b4b8b198b65d0bd9d63490e847ff7b53989d4 # v4.0.0
with:
subject-name: |
${{ vars.DOCKER_USERNAME }}/${{ steps.repo-name.outputs.repo-name }}

View File

@ -213,7 +213,7 @@
"engines": {
"node": "^22.20.0 || ^24"
},
"packageManager": "pnpm@10.30.1+sha512.3590e550d5384caa39bd5c7c739f72270234b2f6059e13018f975c313b1eb9fefcc09714048765d4d9efe961382c312e624572c0420762bdc5d5940cdf9be73a",
"packageManager": "pnpm@10.30.3+sha512.c961d1e0a2d8e354ecaa5166b822516668b7f44cb5bd95122d590dd81922f606f5473b6d23ec4a5be05e7fcd18e8488d47d978bbe981872f1145d06e9a740017",
"pnpm": {
"onlyBuiltDependencies": [
"bufferutil",

View File

@ -2779,8 +2779,8 @@ packages:
engines: {node: '>=6.0.0'}
hasBin: true
basic-ftp@5.1.0:
resolution: {integrity: sha512-RkaJzeJKDbaDWTIPiJwubyljaEPwpVWkm9Rt5h9Nd6h7tEXTJ3VB4qxdZBioV7JO5yLUaOKwz7vDOzlncUsegw==}
basic-ftp@5.2.0:
resolution: {integrity: sha512-VoMINM2rqJwJgfdHq6RiUudKt2BV+FY5ZFezP/ypmwayk68+NzzAQy4XXLlqsGD4MCzq3DrmNFD/uUmBJuGoXw==}
engines: {node: '>=10.0.0'}
bcrypt-pbkdf@1.0.2:
@ -4568,27 +4568,19 @@ packages:
engines: {node: '>=18.0.0'}
hasBin: true
minimatch@10.2.2:
resolution: {integrity: sha512-+G4CpNBxa5MprY+04MbgOw1v7So6n5JY166pFi9KfYwT78fxScCeSNQSNzp6dpPSW2rONOps6Ocam1wFhCgoVw==}
minimatch@10.2.4:
resolution: {integrity: sha512-oRjTw/97aTBN0RHbYCdtF1MQfvusSIBQM0IZEgzl6426+8jSC0nF1a/GmnVLpfB9yyr6g6FTqWqiZVbxrtaCIg==}
engines: {node: 18 || 20 || >=22}
minimatch@10.2.3:
resolution: {integrity: sha512-Rwi3pnapEqirPSbWbrZaa6N3nmqq4Xer/2XooiOKyV3q12ML06f7MOuc5DVH8ONZIFhwIYQ3yzPH4nt7iWHaTg==}
engines: {node: 18 || 20 || >=22}
minimatch@3.1.3:
resolution: {integrity: sha512-M2GCs7Vk83NxkUyQV1bkABc4yxgz9kILhHImZiBPAZ9ybuvCb0/H7lEl5XvIg3g+9d4eNotkZA5IWwYl0tibaA==}
minimatch@3.1.5:
resolution: {integrity: sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==}
minimatch@9.0.1:
resolution: {integrity: sha512-0jWhJpD/MdhPXwPuiRkCbfYfSKp2qnn2eOc279qI7f+osl/l+prKSrvhg157zSYvx/1nmgn2NqdT6k2Z7zSH9w==}
engines: {node: '>=16 || 14 >=14.17'}
minimatch@9.0.6:
resolution: {integrity: sha512-kQAVowdR33euIqeA0+VZTDqU+qo1IeVY+hrKYtZMio3Pg0P0vuh/kwRylLUddJhB6pf3q/botcOvRtx4IN1wqQ==}
engines: {node: '>=16 || 14 >=14.17'}
minimatch@9.0.7:
resolution: {integrity: sha512-MOwgjc8tfrpn5QQEvjijjmDVtMw2oL88ugTevzxQnzRLm6l3fVEF2gzU0kYeYYKD8C66+IdGX6peJ4MyUlUnPg==}
minimatch@9.0.8:
resolution: {integrity: sha512-reYkDYtj/b19TeqbNZCV4q9t+Yxylf/rYBsLb42SXJatTv4/ylq5lEiAmhA/IToxO7NI2UzNMghHoHuaqDkAjw==}
engines: {node: '>=16 || 14 >=14.17'}
minimist@1.2.8:
@ -6471,7 +6463,7 @@ snapshots:
dependencies:
'@eslint/object-schema': 3.0.2
debug: 4.4.3
minimatch: 10.2.2
minimatch: 10.2.4
transitivePeerDependencies:
- supports-color
@ -6496,7 +6488,7 @@ snapshots:
ignore: 5.3.2
import-fresh: 3.3.1
js-yaml: 4.1.1
minimatch: 3.1.3
minimatch: 3.1.5
strip-json-comments: 3.1.1
transitivePeerDependencies:
- supports-color
@ -6520,7 +6512,7 @@ snapshots:
'@opentelemetry/core': 2.5.1(@opentelemetry/api@1.9.0)
'@opentelemetry/instrumentation': 0.208.0(@opentelemetry/api@1.9.0)
'@opentelemetry/semantic-conventions': 1.39.0
minimatch: 10.2.3
minimatch: 10.2.4
transitivePeerDependencies:
- supports-color
@ -7678,7 +7670,7 @@ snapshots:
'@stylistic/eslint-plugin@5.9.0(eslint@10.0.2(jiti@2.6.1))':
dependencies:
'@eslint-community/eslint-utils': 4.9.1(eslint@10.0.2(jiti@2.6.1))
'@typescript-eslint/types': 8.56.0
'@typescript-eslint/types': 8.56.1
eslint: 10.0.2(jiti@2.6.1)
eslint-visitor-keys: 4.2.1
espree: 10.4.0
@ -7924,8 +7916,8 @@ snapshots:
'@typescript-eslint/project-service@8.56.0(typescript@5.9.3)':
dependencies:
'@typescript-eslint/tsconfig-utils': 8.56.0(typescript@5.9.3)
'@typescript-eslint/types': 8.56.0
'@typescript-eslint/tsconfig-utils': 8.56.1(typescript@5.9.3)
'@typescript-eslint/types': 8.56.1
debug: 4.4.3
typescript: 5.9.3
transitivePeerDependencies:
@ -7993,7 +7985,7 @@ snapshots:
'@typescript-eslint/types': 8.56.0
'@typescript-eslint/visitor-keys': 8.56.0
debug: 4.4.3
minimatch: 9.0.7
minimatch: 9.0.8
semver: 7.7.4
tinyglobby: 0.2.15
ts-api-utils: 2.4.0(typescript@5.9.3)
@ -8008,7 +8000,7 @@ snapshots:
'@typescript-eslint/types': 8.56.1
'@typescript-eslint/visitor-keys': 8.56.1
debug: 4.4.3
minimatch: 10.2.2
minimatch: 10.2.4
semver: 7.7.4
tinyglobby: 0.2.15
ts-api-utils: 2.4.0(typescript@5.9.3)
@ -8340,7 +8332,7 @@ snapshots:
baseline-browser-mapping@2.10.0: {}
basic-ftp@5.1.0: {}
basic-ftp@5.2.0: {}
bcrypt-pbkdf@1.0.2:
dependencies:
@ -9067,13 +9059,13 @@ snapshots:
eslint-plugin-import-x@4.16.1(@typescript-eslint/utils@8.56.1(eslint@10.0.2(jiti@2.6.1))(typescript@5.9.3))(eslint-import-resolver-node@0.3.9)(eslint@10.0.2(jiti@2.6.1)):
dependencies:
'@typescript-eslint/types': 8.56.0
'@typescript-eslint/types': 8.56.1
comment-parser: 1.4.5
debug: 4.4.3
eslint: 10.0.2(jiti@2.6.1)
eslint-import-context: 0.1.9(unrs-resolver@1.11.1)
is-glob: 4.0.3
minimatch: 10.2.2
minimatch: 10.2.4
semver: 7.7.4
stable-hash-x: 0.2.0
unrs-resolver: 1.11.1
@ -9098,7 +9090,7 @@ snapshots:
hasown: '@nolyfill/hasown@1.0.44'
is-core-module: '@nolyfill/is-core-module@1.0.39'
is-glob: 4.0.3
minimatch: 3.1.3
minimatch: 3.1.5
object.fromentries: '@nolyfill/object.fromentries@1.0.44'
object.groupby: '@nolyfill/object.groupby@1.0.44'
object.values: '@nolyfill/object.values@1.0.44'
@ -9126,7 +9118,7 @@ snapshots:
hasown: '@nolyfill/hasown@1.0.44'
jsx-ast-utils: 3.3.5
language-tags: 1.0.9
minimatch: 3.1.3
minimatch: 3.1.5
object.fromentries: '@nolyfill/object.fromentries@1.0.44'
safe-regex-test: '@nolyfill/safe-regex-test@1.0.44'
string.prototype.includes: '@nolyfill/string.prototype.includes@1.0.44'
@ -9240,7 +9232,7 @@ snapshots:
imurmurhash: 0.1.4
is-glob: 4.0.3
json-stable-stringify-without-jsonify: 1.0.1
minimatch: 10.2.2
minimatch: 10.2.4
natural-compare: 1.4.0
optionator: 0.9.4
optionalDependencies:
@ -9490,7 +9482,7 @@ snapshots:
get-uri@6.0.5:
dependencies:
basic-ftp: 5.1.0
basic-ftp: 5.2.0
data-uri-to-buffer: 6.0.2
debug: 4.4.3
transitivePeerDependencies:
@ -9516,14 +9508,14 @@ snapshots:
dependencies:
foreground-child: 3.3.1
jackspeak: 3.4.3
minimatch: 9.0.6
minimatch: 9.0.8
minipass: 7.1.3
package-json-from-dist: 1.0.1
path-scurry: 1.11.1
glob@13.0.6:
dependencies:
minimatch: 10.2.2
minimatch: 10.2.4
minipass: 7.1.3
path-scurry: 2.0.2
@ -10401,15 +10393,11 @@ snapshots:
- bufferutil
- utf-8-validate
minimatch@10.2.2:
minimatch@10.2.4:
dependencies:
brace-expansion: 5.0.3
minimatch@10.2.3:
dependencies:
brace-expansion: 5.0.3
minimatch@3.1.3:
minimatch@3.1.5:
dependencies:
brace-expansion: 1.1.12
@ -10417,11 +10405,7 @@ snapshots:
dependencies:
brace-expansion: 2.0.2
minimatch@9.0.6:
dependencies:
brace-expansion: 5.0.3
minimatch@9.0.7:
minimatch@9.0.8:
dependencies:
brace-expansion: 5.0.3