From 84e113c4142a13698e6da45b8033e88032cfe539 Mon Sep 17 00:00:00 2001 From: Artem Goncharov Date: Fri, 10 Jan 2025 13:06:33 +0100 Subject: [PATCH] chore: update attest-build-provenance action to v2 Since some time there is a v2 version of the attest-build-provenance GitHub action. When used in a project with scorecard/dependabot/renovate using v1 version causes warning, update PRs, etc what `dist` is not happy about unless dirty-mode is enabled. Instead just update the template to use the newest action version. --- cargo-dist/templates/ci/github/release.yml.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cargo-dist/templates/ci/github/release.yml.j2 b/cargo-dist/templates/ci/github/release.yml.j2 index ddaf3f89a..7f522cadd 100644 --- a/cargo-dist/templates/ci/github/release.yml.j2 +++ b/cargo-dist/templates/ci/github/release.yml.j2 @@ -321,7 +321,7 @@ jobs: echo "dist ran successfully" {{%- if github_attestations is defined and github_attestations %}} - name: Attest - uses: actions/attest-build-provenance@v1 + uses: actions/attest-build-provenance@v2 with: subject-path: "target/distrib/*${{ join(matrix.targets, ', ') }}*" {{%- endif %}}