Skip to content

chore(deps): bump actions/attest from 4.2.0 to 4.2.1 - #2572

Merged
pimlock merged 1 commit into
mainfrom
dependabot/github_actions/actions/attest-4.2.1
Jul 31, 2026
Merged

chore(deps): bump actions/attest from 4.2.0 to 4.2.1#2572
pimlock merged 1 commit into
mainfrom
dependabot/github_actions/actions/attest-4.2.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/attest from 4.2.0 to 4.2.1.

Release notes

Sourced from actions/attest's releases.

v4.2.1

What's Changed

Full Changelog: actions/attest@v4.2.0...v4.2.1

Commits
  • 508db95 fix: strip OCI image tag when pushing attestation to registry (#464)
  • dda48f2 Bump the npm-development group across 1 directory with 6 updates (#461)
  • 7d789a3 Bump the actions-minor group with 3 updates (#463)
  • 1f3ca2f Add release-cutter canvas extension (#454)
  • d215549 Bump tar from 7.5.17 to 7.5.21 (#459)
  • 20c90ed Bump the npm-development group with 2 updates (#455)
  • 43c2c81 Bump the actions-minor group with 4 updates (#456)
  • f1d64fb Bump actions/setup-node from 6.4.0 to 7.0.0 (#457)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/attest](https://github.com/actions/attest) from 4.2.0 to 4.2.1.
- [Release notes](https://github.com/actions/attest/releases)
- [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md)
- [Commits](actions/attest@f7c74d2...508db95)

---
updated-dependencies:
- dependency-name: actions/attest
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 31, 2026
@dependabot
dependabot Bot requested review from maxamillion and mrunalp as code owners July 31, 2026 05:07
@dependabot dependabot Bot added the github_actions Pull requests that update GitHub Actions code label Jul 31, 2026
@dependabot
dependabot Bot requested review from a team and derekwaynecarr as code owners July 31, 2026 05:07
@copy-pr-bot

copy-pr-bot Bot commented Jul 31, 2026

Copy link
Copy Markdown

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

@pimlock

pimlock commented Jul 31, 2026

Copy link
Copy Markdown
Collaborator

/ok to test 79a82e5

@pimlock
pimlock enabled auto-merge July 31, 2026 18:58
@pimlock
pimlock added this pull request to the merge queue Jul 31, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to failed status checks Jul 31, 2026
@pimlock
pimlock added this pull request to the merge queue Jul 31, 2026
Merged via the queue into main with commit 770d4e6 Jul 31, 2026
44 of 46 checks passed
@pimlock
pimlock deleted the dependabot/github_actions/actions/attest-4.2.1 branch July 31, 2026 19:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant