From 3e519e935f766ce3c0263035b606613b3637e79e Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 8 Apr 2026 17:48:03 +0000
Subject: [PATCH] Update actions/attest-build-provenance action to v4

---
 .github/workflows/build_bootstrap_images_aarch64.yaml | 2 +-
 .github/workflows/build_bootstrap_images_x86_64.yaml  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build_bootstrap_images_aarch64.yaml b/.github/workflows/build_bootstrap_images_aarch64.yaml
index eb9686a..5b0a959 100644
--- a/.github/workflows/build_bootstrap_images_aarch64.yaml
+++ b/.github/workflows/build_bootstrap_images_aarch64.yaml
@@ -198,7 +198,7 @@ jobs:
      #Build Provenance
       - name: Attest Build Provenance
         if: env.HAS_IMAGE == 'TRUE'
-        uses: actions/attest-build-provenance@v2.4.0
+        uses: actions/attest-build-provenance@v4.1.0
         with:
           subject-name: "image-${{ matrix.image }}-${{ matrix.arch }}"
           subject-path: ${{ matrix.file }}
diff --git a/.github/workflows/build_bootstrap_images_x86_64.yaml b/.github/workflows/build_bootstrap_images_x86_64.yaml
index 241d80a..e03a8db 100644
--- a/.github/workflows/build_bootstrap_images_x86_64.yaml
+++ b/.github/workflows/build_bootstrap_images_x86_64.yaml
@@ -197,7 +197,7 @@ jobs:
      #Build Provenance
       - name: Attest Build Provenance
         if: env.HAS_IMAGE == 'TRUE'
-        uses: actions/attest-build-provenance@v2.4.0
+        uses: actions/attest-build-provenance@v4.1.0
         with:
           subject-name: "image-${{ matrix.image }}-${{ matrix.arch }}"
           subject-path: ${{ matrix.file }}