Skip to content
This repository was archived by the owner on Jun 29, 2026. It is now read-only.

chore(actions): bump actions/attest-sbom from 2.4.0 to 4.1.0#2

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/attest-sbom-4.1.0
Open

chore(actions): bump actions/attest-sbom from 2.4.0 to 4.1.0#2
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/attest-sbom-4.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 23, 2026

Copy link
Copy Markdown

Bumps actions/attest-sbom from 2.4.0 to 4.1.0.

Release notes

Sourced from actions/attest-sbom's releases.

v4.1.0

[!WARNING] As of version 4.0.0 this action is being deprecated in favor of actions/attest. actions/attest-sbom will continue to function as a wrapper on top of actions/attest for some period of time, but applications should make plans to migrate.

All of the existing action inputs are compatible with the actions/attest interface.

What's Changed

Full Changelog: actions/attest-sbom@v4.0.0...v4.1.0

v4.0.0

[!WARNING] As of version 4.0.0 this action is being deprecated in favor of actions/attest. actions/attest-sbom will continue to function as a wrapper on top of actions/attest for some period of time, but applications should make plans to migrate.

All of the existing action inputs are compatible with the actions/attest interface.

What's Changed

Full Changelog: actions/attest-sbom@v3...v4.0.0

v3.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1 Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/attest-sbom@v2.4.0...v3.0.0

Commits
  • c604332 Bump actions/attest from 4.0.0 to 4.1.0 in the actions-minor group (#255)
  • f18f83a update RELEASE.md docs (#254)
  • 07e74fc perpare v4 release (#253)
  • b74e951 Bump the actions-minor group with 2 updates (#247)
  • 7d9b9d6 Bump the npm-development group across 1 directory with 4 updates (#245)
  • 35d5f43 Bump @​actions/core from 2.0.1 to 2.0.2 in the npm-production group (#243)
  • 876bb5f Bump the actions-minor group across 1 directory with 3 updates (#246)
  • 6cf30ca Bump the npm-development group with 2 updates (#241)
  • e395115 Bump the actions-minor group with 2 updates (#239)
  • afc801d Bump the npm-development group with 3 updates (#240)
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github Jun 23, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions github-actions Bot added the chore label Jun 23, 2026
Bumps [actions/attest-sbom](https://github.com/actions/attest-sbom) from 2.4.0 to 4.1.0.
- [Release notes](https://github.com/actions/attest-sbom/releases)
- [Changelog](https://github.com/actions/attest-sbom/blob/main/RELEASE.md)
- [Commits](actions/attest-sbom@bd218ad...c604332)

---
updated-dependencies:
- dependency-name: actions/attest-sbom
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(actions): Bump actions/attest-sbom from 2.4.0 to 4.1.0 chore(actions): bump actions/attest-sbom from 2.4.0 to 4.1.0 Jun 23, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/attest-sbom-4.1.0 branch from 383d4e0 to 7d863ea Compare June 23, 2026 21:04
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants