Merge pull request #1170 from CoffeaTeam/dependabot/github_actions/ac…

…tions/attest-build-provenance-1.4.2 ci: bump actions/attest-build-provenance from 1.4.1 to 1.4.2
CoffeaTeam · Aug 23, 2024 · 1ec34f2 · 1ec34f2
2 parents e8e02ba + 11d3e7f
commit 1ec34f2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -208,7 +208,7 @@ jobs:
     - name: Verify the distribution
       run: pipx run twine check --strict dist/*
     - name: Generate artifact attestation for sdist and wheel
-      uses: actions/attest-build-provenance@310b0a4a3b0b78ef57ecda988ee04b132db73ef8 # v1.4.1
+      uses: actions/attest-build-provenance@6149ea5740be74af77f260b9db67e633f6b0a9a1 # v1.4.2
       with:
         subject-path: "dist/coffea-*"
     - name: Publish package to PyPI