From c96e3aad199a7d3e64475e9a471d23cb6df6a98e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 18 Aug 2026 05:08:43 +0000 Subject: [PATCH] chore(deps)(deps): bump the github-actions group across 1 directory with 2 updates Bumps the github-actions group with 2 updates in the / directory: [actions/attest](https://github.com/actions/attest) and [docker/login-action](https://github.com/docker/login-action). Updates `actions/attest` from 4.2.0 to 4.2.2 - [Release notes](https://github.com/actions/attest/releases) - [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest/compare/v4.2.0...v4.2.2) Updates `docker/login-action` from 4.5.1 to 4.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v4.5.1...v4.6.0) --- updated-dependencies: - dependency-name: actions/attest dependency-version: 4.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/rhiza_release.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/rhiza_release.yml b/.github/workflows/rhiza_release.yml index 0a34b5d..0af5877 100644 --- a/.github/workflows/rhiza_release.yml +++ b/.github/workflows/rhiza_release.yml @@ -271,7 +271,7 @@ jobs: # Attest only the JSON format as it's the canonical machine-readable format. # The XML format is provided for compatibility but doesn't need separate attestation. if: hashFiles('pyproject.toml') != '' && github.event.repository.private == false - uses: actions/attest@v4.2.0 + uses: actions/attest@v4.2.2 with: subject-path: sbom.cdx.json sbom-path: sbom.cdx.json @@ -512,7 +512,7 @@ jobs: - name: Login to Container Registry if: steps.check_publish.outputs.should_publish == 'true' - uses: docker/login-action@v4.5.1 + uses: docker/login-action@v4.6.0 with: registry: ${{ steps.registry.outputs.registry }} username: ${{ github.repository_owner }}