Bump actions/attest-sbom from 2.4.0 to 4.1.0

dependabot[bot] · web-flow · commit b8db37326c5a · 2026-04-11T05:42:37.000Z
Bumps [actions/attest-sbom](https://github.com/actions/attest-sbom) from 2.4.0 to 4.1.0. - [Release notes](https://github.com/actions/attest-sbom/releases) - [Changelog](https://github.com/actions/attest-sbom/blob/main/RELEASE.md) - [Commits](actions/attest-sbom@bd218ad...c604332) --- updated-dependencies: - dependency-name: actions/attest-sbom dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -124,7 +124,7 @@ jobs:
           "
 
       - name: Attest SBOM
-        uses: actions/attest-sbom@bd218ad0dbcb3e146bd073d1d9c6d78e08aa8a0b # v2
+        uses: actions/attest-sbom@c604332985a26aa8cf1bdc465b92731239ec6b9e # v4.1.0
         with:
           subject-path: '*.tar.gz'
           sbom-path: 'sbom.json'

Original file line number	Diff line number	Diff line change
`@@ -124,7 +124,7 @@ jobs:`
`124`	`124`	`"`
`125`	`125`
`126`	`126`	`- name: Attest SBOM`
`127`		`- uses: actions/attest-sbom@bd218ad0dbcb3e146bd073d1d9c6d78e08aa8a0b # v2`
	`127`	`+ uses: actions/attest-sbom@c604332985a26aa8cf1bdc465b92731239ec6b9e # v4.1.0`
`128`	`128`	`with:`
`129`	`129`	`subject-path: '*.tar.gz'`
`130`	`130`	`sbom-path: 'sbom.json'`