From 0badecf370e3a8214f85cc144c2b9aa04e30a0c3 Mon Sep 17 00:00:00 2001 From: Henry Schreiner Date: Fri, 14 Aug 2026 13:08:10 -0400 Subject: [PATCH] chore: use actions/attest instead of the wrapper action actions/attest-build-provenance is only a wrapper on actions/attest as of v4, and new code should use actions/attest. Assisted-by: ClaudeCode:claude-opus-5 --- .github/workflows/cd.yml | 2 +- docs/guides/gha_pure.md | 4 ++-- docs/guides/gha_wheels.md | 2 +- .../{% if cookiecutter.__type!='compiled' %}cd.yml{% endif %} | 2 +- .../{% if cookiecutter.__type=='compiled' %}cd.yml{% endif %} | 2 +- 5 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml index 563784b9..818df0df 100644 --- a/.github/workflows/cd.yml +++ b/.github/workflows/cd.yml @@ -42,7 +42,7 @@ jobs: path: dist - name: Generate artifact attestation for sdist and wheel - uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4.2.2 + uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: subject-path: "dist/*" diff --git a/docs/guides/gha_pure.md b/docs/guides/gha_pure.md index 009a8fc3..c1a70e2f 100644 --- a/docs/guides/gha_pure.md +++ b/docs/guides/gha_pure.md @@ -142,7 +142,7 @@ publish: path: dist - name: Generate artifact attestation for sdist and wheel - uses: actions/attest-build-provenance@v4 + uses: actions/attest@v4 with: subject-path: "dist/*" @@ -234,7 +234,7 @@ jobs: path: dist - name: Generate artifact attestation for sdist and wheel - uses: actions/attest-build-provenance@v4 + uses: actions/attest@v4 with: subject-path: "dist/*" diff --git a/docs/guides/gha_wheels.md b/docs/guides/gha_wheels.md index 0c3d1052..26c0d031 100644 --- a/docs/guides/gha_wheels.md +++ b/docs/guides/gha_wheels.md @@ -179,7 +179,7 @@ upload_all: merge-multiple: true - name: Generate artifact attestations - uses: actions/attest-build-provenance@v4 + uses: actions/attest@v4 with: subject-path: "dist/*" diff --git a/{{cookiecutter.project_name}}/.github/workflows/{% if cookiecutter.__type!='compiled' %}cd.yml{% endif %} b/{{cookiecutter.project_name}}/.github/workflows/{% if cookiecutter.__type!='compiled' %}cd.yml{% endif %} index c0b9be00..84d87331 100644 --- a/{{cookiecutter.project_name}}/.github/workflows/{% if cookiecutter.__type!='compiled' %}cd.yml{% endif %} +++ b/{{cookiecutter.project_name}}/.github/workflows/{% if cookiecutter.__type!='compiled' %}cd.yml{% endif %} @@ -54,7 +54,7 @@ jobs: path: dist - name: Generate artifact attestation for sdist and wheel - uses: actions/attest-build-provenance@v4 + uses: actions/attest@v4 with: subject-path: "dist/*" diff --git a/{{cookiecutter.project_name}}/.github/workflows/{% if cookiecutter.__type=='compiled' %}cd.yml{% endif %} b/{{cookiecutter.project_name}}/.github/workflows/{% if cookiecutter.__type=='compiled' %}cd.yml{% endif %} index 21e79455..bb68b707 100644 --- a/{{cookiecutter.project_name}}/.github/workflows/{% if cookiecutter.__type=='compiled' %}cd.yml{% endif %} +++ b/{{cookiecutter.project_name}}/.github/workflows/{% if cookiecutter.__type=='compiled' %}cd.yml{% endif %} @@ -93,7 +93,7 @@ jobs: merge-multiple: true - name: Generate artifact attestations - uses: actions/attest-build-provenance@v4 + uses: actions/attest@v4 with: subject-path: "dist/*"