From 3e0cc05bcc00d6490d16eef3e9ea1c6e6a46ff6e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 6 Apr 2026 14:54:42 +0000 Subject: [PATCH] Bump actions/attest-sbom Bumps [actions/attest-sbom](https://github.com/actions/attest-sbom) from 10926c72720ffc3f7b666661c8e55b1344e2a365 to bd218ad0dbcb3e146bd073d1d9c6d78e08aa8a0b. - [Release notes](https://github.com/actions/attest-sbom/releases) - [Changelog](https://github.com/actions/attest-sbom/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-sbom/compare/10926c72720ffc3f7b666661c8e55b1344e2a365...bd218ad0dbcb3e146bd073d1d9c6d78e08aa8a0b) --- updated-dependencies: - dependency-name: actions/attest-sbom dependency-version: bd218ad0dbcb3e146bd073d1d9c6d78e08aa8a0b dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 5c6d87254..147e03216 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -124,7 +124,7 @@ jobs: " - name: Attest SBOM - uses: actions/attest-sbom@10926c72720ffc3f7b666661c8e55b1344e2a365 # v2 + uses: actions/attest-sbom@bd218ad0dbcb3e146bd073d1d9c6d78e08aa8a0b # v2 with: subject-path: '*.tar.gz' sbom-path: 'sbom.json'