[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/attest-sbom	action	major	v2 → v4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/attest-sbom (actions/attest-sbom)

v4.1.0

Compare Source

[!WARNING]
As of version 4.0.0 this action is being deprecated in favor of actions/attest. actions/attest-sbom will continue to function as a wrapper on top of actions/attest for some period of time, but applications should make plans to migrate.

All of the existing action inputs are compatible with the actions/attest interface.

What's Changed

• Update RELEASE.md docs by @​bdehamer in #​254
• Bump actions/attest from 4.0.0 to 4.1.0 in the actions-minor group by @​dependabot[bot] in #​255
  • Bump @actions/attest from 3.0.0 to 3.1.0 by @​bdehamer in actions/attest#362
  • Bump @actions/attest from 3.1.0 to 3.2.0 by @​bdehamer in actions/attest#365
  • Add new subject-version input for inclusion in storage record by @​bdehamer in actions/attest#364
  • Add storage record content to README by @​bdehamer in actions/attest#366

Full Changelog: actions/attest-sbom@v4.0.0...v4.1.0

v4.0.0

Compare Source

[!WARNING]
As of version 4.0.0 this action is being deprecated in favor of actions/attest. actions/attest-sbom will continue to function as a wrapper on top of actions/attest for some period of time, but applications should make plans to migrate.

All of the existing action inputs are compatible with the actions/attest interface.

What's Changed

• Prepare v4 release by @​bdehamer in #​253

Full Changelog: actions/attest-sbom@v3...v4.0.0

v4

Compare Source

v3

Compare Source

v3.0.0

Compare Source

What's Changed

• Adjust node max-http-header-size setting by @​bdehamer in #​201
• Bump actions/attest from v2.4.0 to v3.0.0 by @​bdehamer in #​202
  • Bump runtime to node24
  • Improved checksum parsing
• Bump attest-sbom/predicate to v2.0.0 by @​bdehamer in #​206
  • Bump predicate runtime to node24 by @​bdehamer in #​204

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/attest-sbom@v2.4.0...v3.0.0

v2.4.0

Compare Source

What's Changed

• Bump actions/attest from 2.2.1 to 2.3.0 in the actions-minor group by @​dependabot in #​169
• Bump undici from 5.28.5 to 5.29.0 by @​dependabot in #​172
• Bump actions/attest from 2.3.0 to 2.4.0 by @​bdehamer in #​178
  • Includes support for the new well-known summary file which will accumulate paths to all attestations generated in a given workflow run

Full Changelog: actions/attest-sbom@v2.2.0...v2.4.0

v2.2.0

Compare Source

What's Changed

• Bump actions/attest from v2.1.0 to v2.2.0 by @​bdehamer in #​148
  • Includes support for new subject-checksums input parameter

Full Changelog: actions/attest-sbom@v2.1.0...v2.2.0

v2.1.0

Compare Source

What's Changed

• Update README w/ note about GH plans supporting attestations by @​bdehamer in #​136
• Add attestation-id and attestation-url outputs by @​bdehamer in #​137

Full Changelog: actions/attest-sbom@v2.0.1...v2.1.0

v2.0.1

Compare Source

What's Changed

• Bump actions/attest from 2.0.0 to 2.0.1 by @​bdehamer in #​133
  • Deduplicate subjects before adding to in-toto statement

Full Changelog: actions/attest-sbom@v2.0.0...v2.0.1

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • "before 6am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.