From 3c5703aae953f0033ab93c38e578c0be9ee41cc9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 2 Sep 2026 17:24:57 +0000 Subject: [PATCH] Bump actions/attest-build-provenance Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from e3fe62ef559997059fe8380e7d2b4c909e2d65f4 to 9d57eef8c06cd9d6b433effeeb7a6a77b3ff94ad. - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-build-provenance/compare/e3fe62ef559997059fe8380e7d2b4c909e2d65f4...9d57eef8c06cd9d6b433effeeb7a6a77b3ff94ad) --- updated-dependencies: - dependency-name: actions/attest-build-provenance dependency-version: 9d57eef8c06cd9d6b433effeeb7a6a77b3ff94ad dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a9fa377..3bd88c0 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -117,7 +117,7 @@ jobs: test "$(find dist -maxdepth 1 -type f -printf '%f\n' | sort | tr '\n' ' ')" = \ "SHA256SUMS install_hermes_plugin.py substrate_wiki.zip " (cd dist && sha256sum -c SHA256SUMS) - - uses: actions/attest-build-provenance@e3fe62ef559997059fe8380e7d2b4c909e2d65f4 # pinned + - uses: actions/attest-build-provenance@9d57eef8c06cd9d6b433effeeb7a6a77b3ff94ad # pinned with: subject-path: "dist/*" - name: Create immutable tag and GitHub release