Skip to content

Commit 1aef773

Browse files
dependabot[bot]dependabot[bot]
authored
chore(deps): bump actions/attest-build-provenance from 2 to 3 (#447)
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 2 to 3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/attest-build-provenance/releases">actions/attest-build-provenance's releases</a>.</em></p> <blockquote> <h2>v3.0.0</h2> <h2>What's Changed</h2> <ul> <li>Adjust node max-http-header-size setting by <a href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a href="https://redirect.github.com/actions/attest-build-provenance/pull/687">actions/attest-build-provenance#687</a></li> <li>Bump actions/attest from v2.4.0 to <a href="https://github.com/actions/attest/releases/tag/v3.0.0">v3.0.0</a> by <a href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a href="https://redirect.github.com/actions/attest-build-provenance/pull/691">actions/attest-build-provenance#691</a> <ul> <li>Bump to node24 runtime</li> <li>Improved checksum parsing</li> </ul> </li> <li>Bump attest-build-provenance/predicate to v2.0.0 by <a href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a href="https://redirect.github.com/actions/attest-build-provenance/pull/693">actions/attest-build-provenance#693</a> <ul> <li>Bump to node24 runtime by <a href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a href="https://redirect.github.com/actions/attest-build-provenance/pull/692">actions/attest-build-provenance#692</a></li> </ul> </li> </ul> <h2>⚠️ Minimum Compatible Runner Version</h2> <p>v2.327.1 <a href="https://github.com/actions/runner/releases/tag/v2.327.1">Release Notes</a></p> <p>Make sure your runner is updated to this version or newer to use this release.</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/attest-build-provenance/compare/v2.4.0...v3.0.0">https://github.com/actions/attest-build-provenance/compare/v2.4.0...v3.0.0</a></p> <h2>v2.4.0</h2> <h2>What's Changed</h2> <ul> <li>Bump undici from 5.28.5 to 5.29.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/attest-build-provenance/pull/633">actions/attest-build-provenance#633</a></li> <li>Bump actions/attest from 2.3.0 to <a href="https://github.com/actions/attest/releases/tag/v2.4.0">2.4.0</a> by <a href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a href="https://redirect.github.com/actions/attest-build-provenance/pull/654">actions/attest-build-provenance#654</a> <ul> <li>Includes support for the new well-known summary file which will accumulate paths to all attestations generated in a given workflow run</li> </ul> </li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/attest-build-provenance/compare/v2.3.0...v2.4.0">https://github.com/actions/attest-build-provenance/compare/v2.3.0...v2.4.0</a></p> <h2>v2.3.0</h2> <h2>What's Changed</h2> <ul> <li>Bump <code>actions/attest</code> from 2.2.1 to 2.3.0 by <a href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a href="https://redirect.github.com/actions/attest-build-provenance/pull/615">actions/attest-build-provenance#615</a> <ul> <li>Updates <code>@sigstore/oci</code> from 0.4.0 to 0.5.0</li> </ul> </li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/attest-build-provenance/compare/v2.2.3...v2.3.0">https://github.com/actions/attest-build-provenance/compare/v2.2.3...v2.3.0</a></p> <h2>v2.2.3</h2> <h2>What's Changed</h2> <ul> <li>Pin actions/attest reference by commit SHA by <a href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a href="https://redirect.github.com/actions/attest-build-provenance/pull/493">actions/attest-build-provenance#493</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/attest-build-provenance/compare/v2.2.2...v2.2.3">https://github.com/actions/attest-build-provenance/compare/v2.2.2...v2.2.3</a></p> <h2>v2.2.2</h2> <h2>What's Changed</h2> <ul> <li>Bump predicate action from 1.1.4 to 1.1.5 by <a href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a href="https://redirect.github.com/actions/attest-build-provenance/pull/485">actions/attest-build-provenance#485</a> <ul> <li>Bump <code>@​actions/attest</code> from 1.5.0 to 1.6.0 by <a href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a href="https://redirect.github.com/actions/attest-build-provenance/pull/484">actions/attest-build-provenance#484</a> <ul> <li>Update buildSLSAProvenancePredicate to populate <code>workflow.ref</code> field from the <code>ref</code> claim in the OIDC token (<a href="https://redirect.github.com/actions/toolkit/pull/1969">actions/toolkit#1969</a>)</li> </ul> </li> </ul> </li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/attest-build-provenance/compare/v2.2.1...v2.2.2">https://github.com/actions/attest-build-provenance/compare/v2.2.1...v2.2.2</a></p> <h2>v2.2.1</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/attest-build-provenance/commit/977bb373ede98d70efdf65b84cb5f73e068dcc2a"><code>977bb37</code></a> bump attest-build-provenance/predicate to v2.0.0 (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/693">#693</a>)</li> <li><a href="https://github.com/actions/attest-build-provenance/commit/864457a58d4733d7f1574bd8821fa24e02cf7538"><code>864457a</code></a> Bump to node24 runtime (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/692">#692</a>)</li> <li><a href="https://github.com/actions/attest-build-provenance/commit/57aa2b0928860f17511d3a8828161ffc4d0cc940"><code>57aa2b0</code></a> bump actions/attest from v2.4.0 to v3.0.0 (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/691">#691</a>)</li> <li><a href="https://github.com/actions/attest-build-provenance/commit/8ee716368b9238b22c2d8d9579a01cb8630ee506"><code>8ee7163</code></a> refactor eslint config (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/690">#690</a>)</li> <li><a href="https://github.com/actions/attest-build-provenance/commit/91ca1c25673125472e7081bed0d584ac6696d4de"><code>91ca1c2</code></a> Bump actions/checkout from 4.1.1 to 5.0.0 (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/684">#684</a>)</li> <li><a href="https://github.com/actions/attest-build-provenance/commit/ff19f402b6e212671813b2ebe231d8a7c81ec049"><code>ff19f40</code></a> custom node max-http-header-size (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/687">#687</a>)</li> <li><a href="https://github.com/actions/attest-build-provenance/commit/8bd83f1e055c41368a1664e71c43b9783931c8c7"><code>8bd83f1</code></a> pin workflow deps (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/683">#683</a>)</li> <li><a href="https://github.com/actions/attest-build-provenance/commit/f0878de78276446bc2ff4a40ae81f8013db6d773"><code>f0878de</code></a> Bump the npm-development group with 4 updates (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/681">#681</a>)</li> <li><a href="https://github.com/actions/attest-build-provenance/commit/463e6dfa26f7fa5e1171fc7e080434e7cf62bc59"><code>463e6df</code></a> Bump the npm-development group with 3 updates (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/678">#678</a>)</li> <li><a href="https://github.com/actions/attest-build-provenance/commit/fef91c17b834a42bff3ffaaac52edf60146a8ead"><code>fef91c1</code></a> Bump the npm-development group with 6 updates (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/673">#673</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/attest-build-provenance/compare/v2...v3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/attest-build-provenance&package-manager=github_actions&previous-version=2&new-version=3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 48aa36f commit 1aef773

File tree

1 file changed

+9
-9
lines changed

1 file changed

+9
-9
lines changed

‎.github/workflows/llvm-build-bump-pr.yml

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -112,7 +112,7 @@ jobs:
112112
name: ${{ env.CLANG_FORMAT_GIT }}-${{ env.OS_PLATFORM }}-${{ env.OS_ARCH }}
113113
path: dist/git-clang-format
114114

115-
- uses: actions/attest-build-provenance@v2
115+
- uses: actions/attest-build-provenance@v3
116116
with:
117117
subject-name: ${{ env.CLANG_FORMAT_GIT }}-${{ env.OS_PLATFORM }}-${{ env.OS_ARCH }}
118118
subject-digest: sha256:${{ steps.upload-clang-format-git.outputs.artifact-digest }}
@@ -126,7 +126,7 @@ jobs:
126126
name: git-clang-format
127127
path: clang/tools/clang-format/git-clang-format
128128

129-
- uses: actions/attest-build-provenance@v2
129+
- uses: actions/attest-build-provenance@v3
130130
with:
131131
subject-name: git-clang-format
132132
subject-digest: sha256:${{ steps.upload-clang-format-git-python.outputs.artifact-digest }}
@@ -152,7 +152,7 @@ jobs:
152152
name: ${{ env.CLANG_FORMAT_NODE }}-${{ env.OS_PLATFORM }}-${{ env.OS_ARCH }}
153153
path: build/bin/clang-format
154154

155-
- uses: actions/attest-build-provenance@v2
155+
- uses: actions/attest-build-provenance@v3
156156
with:
157157
subject-name: ${{ env.CLANG_FORMAT_NODE }}-${{ env.OS_PLATFORM }}-${{ env.OS_ARCH }}
158158
subject-digest: sha256:${{ steps.upload-clang-format-node.outputs.artifact-digest }}
@@ -254,7 +254,7 @@ jobs:
254254
name: ${{ env.CLANG_FORMAT_GIT }}-linux-${{ matrix.docker.node-name }}
255255
path: ./${{ env.CLANG_FORMAT_GIT }}-linux-${{ matrix.docker.node-name }}/git-clang-format
256256

257-
- uses: actions/attest-build-provenance@v2
257+
- uses: actions/attest-build-provenance@v3
258258
with:
259259
subject-name: ${{ env.CLANG_FORMAT_GIT }}-linux-${{ matrix.docker.node-name }}
260260
subject-digest: sha256:${{ steps.upload-clang-format-git.outputs.artifact-digest }}
@@ -272,7 +272,7 @@ jobs:
272272
name: ${{ env.CLANG_FORMAT_NODE }}-linux-${{ matrix.docker.node-name }}
273273
path: ./${{ env.CLANG_FORMAT_NODE }}-linux-${{ matrix.docker.node-name }}/clang-format
274274

275-
- uses: actions/attest-build-provenance@v2
275+
- uses: actions/attest-build-provenance@v3
276276
with:
277277
subject-name: ${{ env.CLANG_FORMAT_NODE }}-linux-${{ matrix.docker.node-name }}
278278
subject-digest: sha256:${{ steps.upload-clang-format-node.outputs.artifact-digest }}
@@ -337,7 +337,7 @@ jobs:
337337
name: ${{ env.CLANG_FORMAT_GIT }}-${{ env.OS_PLATFORM }}-${{ env.OS_ARCH }}
338338
path: dist/git-clang-format
339339

340-
- uses: actions/attest-build-provenance@v2
340+
- uses: actions/attest-build-provenance@v3
341341
with:
342342
subject-name: ${{ env.CLANG_FORMAT_GIT }}-${{ env.OS_PLATFORM }}-${{ env.OS_ARCH }}
343343
subject-digest: sha256:${{ steps.upload-clang-format-git.outputs.artifact-digest }}
@@ -363,7 +363,7 @@ jobs:
363363
name: ${{ env.CLANG_FORMAT_NODE }}-${{ env.OS_PLATFORM }}-${{ env.OS_ARCH }}
364364
path: build/bin/clang-format
365365

366-
- uses: actions/attest-build-provenance@v2
366+
- uses: actions/attest-build-provenance@v3
367367
with:
368368
subject-name: ${{ env.CLANG_FORMAT_NODE }}-${{ env.OS_PLATFORM }}-${{ env.OS_ARCH }}
369369
subject-digest: sha256:${{ steps.upload-clang-format-node.outputs.artifact-digest }}
@@ -417,7 +417,7 @@ jobs:
417417
name: ${{ env.CLANG_FORMAT_GIT }}-${{ env.OS_PLATFORM }}-${{ env.OS_ARCH }}
418418
path: dist\git-clang-format.exe
419419

420-
- uses: actions/attest-build-provenance@v2
420+
- uses: actions/attest-build-provenance@v3
421421
with:
422422
subject-name: ${{ env.CLANG_FORMAT_GIT }}-${{ env.OS_PLATFORM }}-${{ env.OS_ARCH }}
423423
subject-digest: sha256:${{ steps.upload-clang-format-git.outputs.artifact-digest }}
@@ -440,7 +440,7 @@ jobs:
440440
name: ${{ env.CLANG_FORMAT_NODE }}-${{ env.OS_PLATFORM }}-${{ env.OS_ARCH }}
441441
path: build\bin\clang-format.exe
442442

443-
- uses: actions/attest-build-provenance@v2
443+
- uses: actions/attest-build-provenance@v3
444444
with:
445445
subject-name: ${{ env.CLANG_FORMAT_NODE }}-${{ env.OS_PLATFORM }}-${{ env.OS_ARCH }}
446446
subject-digest: sha256:${{ steps.upload-clang-format-node.outputs.artifact-digest }}

0 commit comments

Comments
 (0)