From 77394763a62a7587d981fb668a60f009e5e218e0 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 9 Mar 2026 00:23:30 +0000
Subject: [PATCH] =?UTF-8?q?chore(deps)!:=20update=20actions/attest-build-p?=
 =?UTF-8?q?rovenance=20action=20(v2.3.0=20=E2=86=92=20v4.1.0)=20(#500)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 .github/workflows/release.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 40b6744..6c3002f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -36,7 +36,7 @@ jobs:
           set -eu
           git archive --format=tar.gz --prefix="${TAG}/" HEAD > "${TAG}-source.tar.gz"
           sha256sum "${TAG}-source.tar.gz" > "${TAG}-source.tar.gz.sha256"
-      - uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
+      - uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
         with:
           subject-path: '${{ github.ref_name }}-source.tar.gz'
       - name: Upload release assets