From f9d73c99d88dc4f78f6a728bc02398b7bbf76f55 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 5 Dec 2024 11:32:08 +0000 Subject: [PATCH] Bump actions/attest-build-provenance from 1.4.4 to 2.0.0 Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 1.4.4 to 2.0.0. - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-build-provenance/compare/v1.4.4...v2.0.0) --- updated-dependencies: - dependency-name: actions/attest-build-provenance dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/package.yml | 2 +- .github/workflows/release.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/package.yml b/.github/workflows/package.yml index fe2f9ab0..1ff44be5 100644 --- a/.github/workflows/package.yml +++ b/.github/workflows/package.yml @@ -37,7 +37,7 @@ jobs: run: | ./cake upload-core-github - name: Attest packages - uses: actions/attest-build-provenance@v1.4.4 + uses: actions/attest-build-provenance@v2.0.0 with: subject-path: out/pkg/dotnet/debug/*.nupkg - name: Upload artifacts diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 2fd28cbb..dedd1898 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -39,11 +39,11 @@ jobs: ./cake upload-core-nuget -c Release ./cake upload-vscode -c Release - name: Attest packages - uses: actions/attest-build-provenance@v1.4.4 + uses: actions/attest-build-provenance@v2.0.0 with: subject-path: out/pkg/dotnet/release/*.nupkg - name: Attest extensions - uses: actions/attest-build-provenance@v1.4.4 + uses: actions/attest-build-provenance@v2.0.0 with: subject-path: out/pkg/vs*/*.vsix - name: Upload artifacts