chore(deps): update actions/attest-build-provenance action to v4.1.1

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/attest-build-provenance	action	patch	v4.1.0 → v4.1.1

---

Release Notes

actions/attest-build-provenance (actions/attest-build-provenance)

v4.1.1

Compare Source

[!NOTE]
As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

• Update actions/attest to v4.1.1 by @​bdehamer in #​858

Full Changelog: actions/attest-build-provenance@v4.1.0...v4.1.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

authentik FIPS Image build status - debian-fips (``)

Image built: ghcr.io/goauthentik/fips-debian:trixie-slim-fips-pr-158 for commit 87bfc08b1a558cdb73530454ba3f838a3e141f05

Test output:

image=ghcr.io/goauthentik/fips-debian
full=ghcr.io/goauthentik/fips-debian:trixie-slim-fips-pr-158
### Debian version ###
docker run --rm ghcr.io/goauthentik/fips-debian:trixie-slim-fips-pr-158 \
	cat /etc/debian_version
13.5
### Test that base images has OpenSSL with FIPS enabled ###
docker run --rm ghcr.io/goauthentik/fips-debian:trixie-slim-fips-pr-158 \
	openssl list -providers -provider default -provider base -provider fips
Providers:
  base
    name: OpenSSL Base Provider
    version: 3.5.6
    status: active
  default
    name: OpenSSL Default Provider
    version: 3.5.6
    status: active
  fips
    name: OpenSSL FIPS Provider
    version: 3.1.2
    status: active

[github-actions]

authentik FIPS Image build status - xmlsec1-fips (``)

Image built: ghcr.io/goauthentik/fips-xmlsec1:1.3.12-slim-trixie-fips-pr-158 for commit 87bfc08b1a558cdb73530454ba3f838a3e141f05

Test output:

image=ghcr.io/goauthentik/fips-xmlsec1
full=ghcr.io/goauthentik/fips-xmlsec1:1.3.12-slim-trixie-fips-pr-158
### Test that base images has OpenSSL with FIPS enabled ###
docker run --rm ghcr.io/goauthentik/fips-xmlsec1:1.3.12-slim-trixie-fips-pr-158 \
	openssl list -providers -provider default -provider base -provider fips
Providers:
  base
    name: OpenSSL Base Provider
    version: 3.5.6
    status: active
  default
    name: OpenSSL Default Provider
    version: 3.5.6
    status: active
  fips
    name: OpenSSL FIPS Provider
    version: 3.1.2
    status: active
### xmlsec1 version ###
docker run --rm ghcr.io/goauthentik/fips-xmlsec1:1.3.12-slim-trixie-fips-pr-158 \
	xmlsec1 --version
xmlsec1 1.3.12 (openssl)

[github-actions]

authentik FIPS Image build status - python-fips (PYTHON_VERSION=3.15.0a2)

Image built: ghcr.io/goauthentik/fips-python:3.15.0a2-slim-trixie-fips-pr-158 for commit 87bfc08b1a558cdb73530454ba3f838a3e141f05

Test output:

image=ghcr.io/goauthentik/fips-python
full=ghcr.io/goauthentik/fips-python:3.15.0a2-slim-trixie-fips-pr-158
### Python version ###
docker run --rm ghcr.io/goauthentik/fips-python:3.15.0a2-slim-trixie-fips-pr-158 \
	python --version
Python 3.15.0a2
### Python SSL version ###
docker run --rm ghcr.io/goauthentik/fips-python:3.15.0a2-slim-trixie-fips-pr-158 \
	python -c "from ssl import OPENSSL_VERSION; print(OPENSSL_VERSION)"
OpenSSL 3.5.6+ak-fips 7 Apr 2026

[github-actions]

authentik FIPS Image build status - python-fips-freethreading (PYTHON_VERSION=3.14.6)

Image built: ghcr.io/goauthentik/fips:3.14.6t-slim-trixie-fips-pr-158 for commit 87bfc08b1a558cdb73530454ba3f838a3e141f05

Test output:

image=ghcr.io/goauthentik/fips
full=ghcr.io/goauthentik/fips:3.14.6t-slim-trixie-fips-pr-158
### Python version ###
docker run --rm ghcr.io/goauthentik/fips:3.14.6t-slim-trixie-fips-pr-158 \
	python --version
Python 3.14.6
### Python SSL version ###
docker run --rm ghcr.io/goauthentik/fips:3.14.6t-slim-trixie-fips-pr-158 \
	python -c "from ssl import OPENSSL_VERSION; print(OPENSSL_VERSION)"
OpenSSL 3.5.6+ak-fips 7 Apr 2026
### Python freethreading ###
docker run --rm ghcr.io/goauthentik/fips:3.14.6t-slim-trixie-fips-pr-158 \
	python -c "import sys; print('Freethreading status:', sys._is_gil_enabled())"
Freethreading status: True

[github-actions]

authentik FIPS Image build status - python-fips-freethreading (PYTHON_VERSION=3.15.0a2)

Image built: ghcr.io/goauthentik/fips:3.15.0a2t-slim-trixie-fips-pr-158 for commit 87bfc08b1a558cdb73530454ba3f838a3e141f05

Test output:

image=ghcr.io/goauthentik/fips
full=ghcr.io/goauthentik/fips:3.15.0a2t-slim-trixie-fips-pr-158
### Python version ###
docker run --rm ghcr.io/goauthentik/fips:3.15.0a2t-slim-trixie-fips-pr-158 \
	python --version
Python 3.15.0a2
### Python SSL version ###
docker run --rm ghcr.io/goauthentik/fips:3.15.0a2t-slim-trixie-fips-pr-158 \
	python -c "from ssl import OPENSSL_VERSION; print(OPENSSL_VERSION)"
OpenSSL 3.5.6+ak-fips 7 Apr 2026
### Python freethreading ###
docker run --rm ghcr.io/goauthentik/fips:3.15.0a2t-slim-trixie-fips-pr-158 \
	python -c "import sys; print('Freethreading status:', sys._is_gil_enabled())"
Freethreading status: True

[github-actions]

authentik FIPS Image build status - python-fips (PYTHON_VERSION=3.14.6)

Image built: ghcr.io/goauthentik/fips-python:3.14.6-slim-trixie-fips-pr-158 for commit 87bfc08b1a558cdb73530454ba3f838a3e141f05

Test output:

image=ghcr.io/goauthentik/fips-python
full=ghcr.io/goauthentik/fips-python:3.14.6-slim-trixie-fips-pr-158
### Python version ###
docker run --rm ghcr.io/goauthentik/fips-python:3.14.6-slim-trixie-fips-pr-158 \
	python --version
Python 3.14.6
### Python SSL version ###
docker run --rm ghcr.io/goauthentik/fips-python:3.14.6-slim-trixie-fips-pr-158 \
	python -c "from ssl import OPENSSL_VERSION; print(OPENSSL_VERSION)"
OpenSSL 3.5.6+ak-fips 7 Apr 2026

[github-actions]

authentik FIPS Image build status - python-fips-freethreading (PYTHON_VERSION=3.13.9)

Image built: ghcr.io/goauthentik/fips:3.13.9t-slim-trixie-fips-pr-158 for commit 87bfc08b1a558cdb73530454ba3f838a3e141f05

Test output:

image=ghcr.io/goauthentik/fips
full=ghcr.io/goauthentik/fips:3.13.9t-slim-trixie-fips-pr-158
### Python version ###
docker run --rm ghcr.io/goauthentik/fips:3.13.9t-slim-trixie-fips-pr-158 \
	python --version
Python 3.13.9
### Python SSL version ###
docker run --rm ghcr.io/goauthentik/fips:3.13.9t-slim-trixie-fips-pr-158 \
	python -c "from ssl import OPENSSL_VERSION; print(OPENSSL_VERSION)"
OpenSSL 3.5.6+ak-fips 7 Apr 2026
### Python freethreading ###
docker run --rm ghcr.io/goauthentik/fips:3.13.9t-slim-trixie-fips-pr-158 \
	python -c "import sys; print('Freethreading status:', sys._is_gil_enabled())"
Freethreading status: True

[github-actions]

authentik FIPS Image build status - python-fips (PYTHON_VERSION=3.13.9)

Image built: ghcr.io/goauthentik/fips-python:3.13.9-slim-trixie-fips-pr-158 for commit 87bfc08b1a558cdb73530454ba3f838a3e141f05

Test output:

image=ghcr.io/goauthentik/fips-python
full=ghcr.io/goauthentik/fips-python:3.13.9-slim-trixie-fips-pr-158
### Python version ###
docker run --rm ghcr.io/goauthentik/fips-python:3.13.9-slim-trixie-fips-pr-158 \
	python --version
Python 3.13.9
### Python SSL version ###
docker run --rm ghcr.io/goauthentik/fips-python:3.13.9-slim-trixie-fips-pr-158 \
	python -c "from ssl import OPENSSL_VERSION; print(OPENSSL_VERSION)"
OpenSSL 3.5.6+ak-fips 7 Apr 2026