From 7a0684921a4fe3042a8926a00b1a14298feb0ae4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ville=20Skytt=C3=A4?= Date: Sat, 2 May 2026 12:47:12 +0300 Subject: [PATCH] Switch generation to actions/attest action, upgrade to v4 https://github.com/actions/attest-build-provenance#usage > As of version 4, actions/attest-build-provenance is simply a wrapper > on top of actions/attest. > > Existing applications may continue to use the attest-build-provenance > action, but new implementations should use actions/attest instead. --- src/ci/github/__snapshot__/github_abi3.yml | 2 +- src/ci/github/__snapshot__/github_bin_no_binding.yml | 2 +- src/ci/github/__snapshot__/github_default.yml | 2 +- .../github/__snapshot__/github_pyproject_detailed_targets.yml | 2 +- src/ci/github/__snapshot__/github_pyproject_simple_targets.yml | 2 +- src/ci/github/__snapshot__/github_zig_pytest.yml | 2 +- src/ci/github/render.rs | 2 +- 7 files changed, 7 insertions(+), 7 deletions(-) diff --git a/src/ci/github/__snapshot__/github_abi3.yml b/src/ci/github/__snapshot__/github_abi3.yml index c1658b1d8..e46a642bd 100644 --- a/src/ci/github/__snapshot__/github_abi3.yml +++ b/src/ci/github/__snapshot__/github_abi3.yml @@ -186,7 +186,7 @@ jobs: steps: - uses: actions/download-artifact@v7 - name: Generate artifact attestation - uses: actions/attest-build-provenance@v3 + uses: actions/attest@v4 with: subject-path: 'wheels-*/*' - name: Install uv diff --git a/src/ci/github/__snapshot__/github_bin_no_binding.yml b/src/ci/github/__snapshot__/github_bin_no_binding.yml index f873e0893..a12e14c45 100644 --- a/src/ci/github/__snapshot__/github_bin_no_binding.yml +++ b/src/ci/github/__snapshot__/github_bin_no_binding.yml @@ -155,7 +155,7 @@ jobs: steps: - uses: actions/download-artifact@v7 - name: Generate artifact attestation - uses: actions/attest-build-provenance@v3 + uses: actions/attest@v4 with: subject-path: 'wheels-*/*' - name: Install uv diff --git a/src/ci/github/__snapshot__/github_default.yml b/src/ci/github/__snapshot__/github_default.yml index 13357672f..84bb03778 100644 --- a/src/ci/github/__snapshot__/github_default.yml +++ b/src/ci/github/__snapshot__/github_default.yml @@ -168,7 +168,7 @@ jobs: steps: - uses: actions/download-artifact@v7 - name: Generate artifact attestation - uses: actions/attest-build-provenance@v3 + uses: actions/attest@v4 with: subject-path: 'wheels-*/*' - name: Install uv diff --git a/src/ci/github/__snapshot__/github_pyproject_detailed_targets.yml b/src/ci/github/__snapshot__/github_pyproject_detailed_targets.yml index d81787d5a..bca252aaf 100644 --- a/src/ci/github/__snapshot__/github_pyproject_detailed_targets.yml +++ b/src/ci/github/__snapshot__/github_pyproject_detailed_targets.yml @@ -60,7 +60,7 @@ jobs: steps: - uses: actions/download-artifact@v7 - name: Generate artifact attestation - uses: actions/attest-build-provenance@v3 + uses: actions/attest@v4 with: subject-path: 'wheels-*/*' - name: Install uv diff --git a/src/ci/github/__snapshot__/github_pyproject_simple_targets.yml b/src/ci/github/__snapshot__/github_pyproject_simple_targets.yml index 8204c2e14..8cb00e564 100644 --- a/src/ci/github/__snapshot__/github_pyproject_simple_targets.yml +++ b/src/ci/github/__snapshot__/github_pyproject_simple_targets.yml @@ -95,7 +95,7 @@ jobs: steps: - uses: actions/download-artifact@v7 - name: Generate artifact attestation - uses: actions/attest-build-provenance@v3 + uses: actions/attest@v4 with: subject-path: 'wheels-*/*' - name: Install uv diff --git a/src/ci/github/__snapshot__/github_zig_pytest.yml b/src/ci/github/__snapshot__/github_zig_pytest.yml index 2d8ba310a..a3f987870 100644 --- a/src/ci/github/__snapshot__/github_zig_pytest.yml +++ b/src/ci/github/__snapshot__/github_zig_pytest.yml @@ -245,7 +245,7 @@ jobs: steps: - uses: actions/download-artifact@v7 - name: Generate artifact attestation - uses: actions/attest-build-provenance@v3 + uses: actions/attest@v4 with: subject-path: 'wheels-*/*' - name: Install uv diff --git a/src/ci/github/render.rs b/src/ci/github/render.rs index ae669cd83..82139a5cf 100644 --- a/src/ci/github/render.rs +++ b/src/ci/github/render.rs @@ -509,7 +509,7 @@ fn emit_release_steps(y: &mut Yaml, resolved: &ResolvedCIConfig) { fn emit_release_attestation_step(y: &mut Yaml) { y.line("- name: Generate artifact attestation"); y.indent(); - y.line("uses: actions/attest-build-provenance@v3"); + y.line("uses: actions/attest@v4"); y.line("with:"); y.indent(); y.line("subject-path: 'wheels-*/*'");