[PR #231] [MERGED] chore(deps): bump actions/attest-build-provenance from 3.1.0 to 3.2.0 #1587

New Issue

GiteaMirror · 2026-04-24T20:08:15-05:00

GiteaMirror commented

2026-04-24 20:08:15 -05:00

📋 Pull Request Information

Original PR: https://github.com/fosrl/newt/pull/231
Author: @dependabot[bot]
Created: 2/2/2026
Status: ✅ Merged
Merged: 3/2/2026
Merged by: @marcschaeferger

Base: main ← Head: dependabot/github_actions/actions/attest-build-provenance-3.2.0

📝 Commits (1)

a8549f3 chore(deps): bump actions/attest-build-provenance from 3.1.0 to 3.2.0

📊 Changes

1 file changed (+2 additions, -2 deletions)

View changed files

📝 .github/workflows/cicd.yml (+2 -2)

📄 Description

Bumps actions/attest-build-provenance from 3.1.0 to 3.2.0.

Release notes

Sourced from actions/attest-build-provenance's releases.

v3.2.0

What's Changed

Bump @actions/core from 1.11.1 to 2.0.1 by @dependabot[bot] in actions/attest-build-provenance#776

Add more documentation on Artifact Metadata Storage Records by @malancas in actions/attest-build-provenance#797

Update actions/attest to latest version v3.2.0 by @malancas in actions/attest-build-provenance#812

Full Changelog: https://github.com/actions/attest-build-provenance/compare/v3.1.0...v3.2.0

Commits

96278af Update actions/attest to latest version v3.2.0 (#812)
6865550 Add more documentation on Artifact Metadata Storage Records (#797)
98f3aa9 Bump @actions/core from 1.11.1 to 2.0.1 (#776)
63e6444 Bump github/codeql-action in the actions-minor group (#782)
3bc61af Bump the npm-development group with 2 updates (#795)
405d0ea Bump the npm-development group with 3 updates (#783)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/fosrl/newt/pull/231 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 2/2/2026 **Status:** ✅ Merged **Merged:** 3/2/2026 **Merged by:** [@marcschaeferger](https://github.com/marcschaeferger) **Base:** `main` ← **Head:** `dependabot/github_actions/actions/attest-build-provenance-3.2.0` --- ### 📝 Commits (1) - [`a8549f3`](https://github.com/fosrl/newt/commit/a8549f32e9dddf383f58037d7b231193d197d75e) chore(deps): bump actions/attest-build-provenance from 3.1.0 to 3.2.0 ### 📊 Changes **1 file changed** (+2 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/cicd.yml` (+2 -2) </details> ### 📄 Description Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 3.1.0 to 3.2.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/attest-build-provenance/releases">actions/attest-build-provenance's releases</a>.</em></p> <blockquote> <h2>v3.2.0</h2> <h2>What's Changed</h2> <ul> <li>Bump <code>@actions/core</code> from 1.11.1 to 2.0.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/attest-build-provenance/pull/776">actions/attest-build-provenance#776</a></li> <li>Add more documentation on Artifact Metadata Storage Records by <a href="https://github.com/malancas"><code>@malancas</code></a> in <a href="https://redirect.github.com/actions/attest-build-provenance/pull/797">actions/attest-build-provenance#797</a></li> <li>Update actions/attest to latest version v3.2.0 by <a href="https://github.com/malancas"><code>@malancas</code></a> in <a href="https://redirect.github.com/actions/attest-build-provenance/pull/812">actions/attest-build-provenance#812</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/attest-build-provenance/compare/v3.1.0...v3.2.0">https://github.com/actions/attest-build-provenance/compare/v3.1.0...v3.2.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/attest-build-provenance/commit/96278af6caaf10aea03fd8d33a09a777ca52d62f"><code>96278af</code></a> Update actions/attest to latest version v3.2.0 (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/812">#812</a>)</li> <li><a href="https://github.com/actions/attest-build-provenance/commit/6865550d0380db508fc599a58cc87c50c0bba5c5"><code>6865550</code></a> Add more documentation on Artifact Metadata Storage Records (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/797">#797</a>)</li> <li><a href="https://github.com/actions/attest-build-provenance/commit/98f3aa9c27c3d6da66cf51b7d38fb7511df72d3a"><code>98f3aa9</code></a> Bump <code>@actions/core</code> from 1.11.1 to 2.0.1 (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/776">#776</a>)</li> <li><a href="https://github.com/actions/attest-build-provenance/commit/63e64444a7857c20bbda4810126aabe30ef3b047"><code>63e6444</code></a> Bump github/codeql-action in the actions-minor group (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/782">#782</a>)</li> <li><a href="https://github.com/actions/attest-build-provenance/commit/3bc61afc810a5808496e2782a241fbbf5b91e8b0"><code>3bc61af</code></a> Bump the npm-development group with 2 updates (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/795">#795</a>)</li> <li><a href="https://github.com/actions/attest-build-provenance/commit/405d0eac46dee8bbc8a98b540f33935742b4d7c8"><code>405d0ea</code></a> Bump the npm-development group with 3 updates (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/783">#783</a>)</li> <li>See full diff in <a href="https://github.com/actions/attest-build-provenance/compare/00014ed6ed5efc5b1ab7f7f34a39eb55d41aa4f8...96278af6caaf10aea03fd8d33a09a777ca52d62f">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/attest-build-provenance&package-manager=github_actions&previous-version=3.1.0&new-version=3.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

GiteaMirror added the pull-request label 2026-04-24 20:08:15 -05:00

GiteaMirror closed this issue

2026-04-24 20:08:16 -05:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/newt#1587