Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: actions/attest-build-provenance
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v3.2.0
Choose a base ref
...
head repository: actions/attest-build-provenance
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v4.0.0
Choose a head ref
  • 11 commits
  • 24 files changed
  • 3 contributors

Commits on Jan 27, 2026

  1. Bump the actions-minor group across 1 directory with 3 updates (#811)

    Bumps the actions-minor group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/setup-node](https://github.com/actions/setup-node) and [github/codeql-action](https://github.com/github/codeql-action).
    
    
    Updates `actions/checkout` from 6.0.1 to 6.0.2
    - [Release notes](https://github.com/actions/checkout/releases)
    - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
    - [Commits](actions/checkout@8e8c483...de0fac2)
    
    Updates `actions/setup-node` from 6.1.0 to 6.2.0
    - [Release notes](https://github.com/actions/setup-node/releases)
    - [Commits](actions/setup-node@395ad32...6044e13)
    
    Updates `github/codeql-action` from 4.31.9 to 4.31.11
    - [Release notes](https://github.com/github/codeql-action/releases)
    - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
    - [Commits](github/codeql-action@5d4e8d1...19b2f06)
    
    ---
    updated-dependencies:
    - dependency-name: actions/checkout
      dependency-version: 6.0.2
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: actions-minor
    - dependency-name: actions/setup-node
      dependency-version: 6.2.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: actions-minor
    - dependency-name: github/codeql-action
      dependency-version: 4.31.11
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: actions-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Jan 27, 2026
    Configuration menu
    Copy the full SHA
    03fc44e View commit details
    Browse the repository at this point in the history
  2. Bump tar from 7.5.2 to 7.5.6 (#809)

    Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.2 to 7.5.6.
    - [Release notes](https://github.com/isaacs/node-tar/releases)
    - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
    - [Commits](isaacs/node-tar@v7.5.2...v7.5.6)
    
    ---
    updated-dependencies:
    - dependency-name: tar
      dependency-version: 7.5.6
      dependency-type: indirect
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Jan 27, 2026
    Configuration menu
    Copy the full SHA
    55d56c3 View commit details
    Browse the repository at this point in the history

Commits on Jan 28, 2026

  1. Bump @actions/attest from 2.1.0 to 2.2.0 (#800)

    * Bump @actions/attest from 2.1.0 to 2.2.0
    
    Bumps [@actions/attest](https://github.com/actions/toolkit/tree/HEAD/packages/attest) from 2.1.0 to 2.2.0.
    - [Changelog](https://github.com/actions/toolkit/blob/main/packages/attest/RELEASES.md)
    - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/attest)
    
    ---
    updated-dependencies:
    - dependency-name: "@actions/attest"
      dependency-version: 2.2.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    * chore: update dist/ after build
    
    ---------
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    Co-authored-by: Tingting Wang <[email protected]>
    dependabot[bot] and tingx2wang authored Jan 28, 2026
    Configuration menu
    Copy the full SHA
    c4c3d11 View commit details
    Browse the repository at this point in the history
  2. Bump the npm-development group across 1 directory with 3 updates (#808)

    * Bump the npm-development group across 1 directory with 3 updates
    
    Bumps the npm-development group with 3 updates in the / directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [prettier](https://github.com/prettier/prettier) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint).
    
    
    Updates `@types/node` from 25.0.3 to 25.0.9
    - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
    - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)
    
    Updates `prettier` from 3.7.4 to 3.8.0
    - [Release notes](https://github.com/prettier/prettier/releases)
    - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
    - [Commits](prettier/prettier@3.7.4...3.8.0)
    
    Updates `typescript-eslint` from 8.51.0 to 8.53.0
    - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
    - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
    - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.53.0/packages/typescript-eslint)
    
    ---
    updated-dependencies:
    - dependency-name: "@types/node"
      dependency-version: 25.0.9
      dependency-type: direct:development
      update-type: version-update:semver-patch
      dependency-group: npm-development
    - dependency-name: prettier
      dependency-version: 3.8.0
      dependency-type: direct:development
      update-type: version-update:semver-minor
      dependency-group: npm-development
    - dependency-name: typescript-eslint
      dependency-version: 8.53.0
      dependency-type: direct:development
      update-type: version-update:semver-minor
      dependency-group: npm-development
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    * chore: update dist/ after build
    
    ---------
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    Co-authored-by: Tingting Wang <[email protected]>
    dependabot[bot] and tingx2wang authored Jan 28, 2026
    1 Configuration menu
    Copy the full SHA
    57db8ba View commit details
    Browse the repository at this point in the history

Commits on Jan 29, 2026

  1. Bump @actions/core from 2.0.1 to 2.0.2 in the npm-production group (#799

    )
    
    * Bump @actions/core from 2.0.1 to 2.0.2 in the npm-production group
    
    Bumps the npm-production group with 1 update: [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core).
    
    
    Updates `@actions/core` from 2.0.1 to 2.0.2
    - [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
    - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)
    
    ---
    updated-dependencies:
    - dependency-name: "@actions/core"
      dependency-version: 2.0.2
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: npm-production
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    * chore: update dist/ after build
    
    ---------
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    Co-authored-by: Tingting Wang <[email protected]>
    dependabot[bot] and tingx2wang authored Jan 29, 2026
    Configuration menu
    Copy the full SHA
    90fadfa View commit details
    Browse the repository at this point in the history
  2. Bump tar from 7.5.6 to 7.5.7 (#816)

    Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.6 to 7.5.7.
    - [Release notes](https://github.com/isaacs/node-tar/releases)
    - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
    - [Commits](isaacs/node-tar@v7.5.6...v7.5.7)
    
    ---
    updated-dependencies:
    - dependency-name: tar
      dependency-version: 7.5.7
      dependency-type: indirect
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Jan 29, 2026
    Configuration menu
    Copy the full SHA
    18db129 View commit details
    Browse the repository at this point in the history

Commits on Feb 2, 2026

  1. Bump @types/node from 25.0.10 to 25.2.0 in the npm-development group (#…

    …819)
    
    Bumps the npm-development group with 1 update: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).
    
    
    Updates `@types/node` from 25.0.10 to 25.2.0
    - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
    - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)
    
    ---
    updated-dependencies:
    - dependency-name: "@types/node"
      dependency-version: 25.2.0
      dependency-type: direct:development
      update-type: version-update:semver-minor
      dependency-group: npm-development
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Feb 2, 2026
    Configuration menu
    Copy the full SHA
    3234352 View commit details
    Browse the repository at this point in the history
  2. Bump github/codeql-action in the actions-minor group (#818)

    Bumps the actions-minor group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).
    
    
    Updates `github/codeql-action` from 4.31.11 to 4.32.0
    - [Release notes](https://github.com/github/codeql-action/releases)
    - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
    - [Commits](github/codeql-action@19b2f06...b20883b)
    
    ---
    updated-dependencies:
    - dependency-name: github/codeql-action
      dependency-version: 4.32.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: actions-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Feb 2, 2026
    Configuration menu
    Copy the full SHA
    c44148e View commit details
    Browse the repository at this point in the history

Commits on Feb 13, 2026

  1. Bump the npm-development group with 2 updates (#825)

    Bumps the npm-development group with 2 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest).
    
    
    Updates `@types/node` from 25.2.0 to 25.2.2
    - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
    - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)
    
    Updates `eslint-plugin-jest` from 29.12.1 to 29.13.0
    - [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
    - [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
    - [Commits](jest-community/eslint-plugin-jest@v29.12.1...v29.13.0)
    
    ---
    updated-dependencies:
    - dependency-name: "@types/node"
      dependency-version: 25.2.2
      dependency-type: direct:development
      update-type: version-update:semver-patch
      dependency-group: npm-development
    - dependency-name: eslint-plugin-jest
      dependency-version: 29.13.0
      dependency-type: direct:development
      update-type: version-update:semver-minor
      dependency-group: npm-development
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Feb 13, 2026
    Configuration menu
    Copy the full SHA
    7c757df View commit details
    Browse the repository at this point in the history
  2. Bump github/codeql-action in the actions-minor group (#824)

    Bumps the actions-minor group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).
    
    
    Updates `github/codeql-action` from 4.32.0 to 4.32.2
    - [Release notes](https://github.com/github/codeql-action/releases)
    - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
    - [Commits](github/codeql-action@b20883b...45cbd0c)
    
    ---
    updated-dependencies:
    - dependency-name: github/codeql-action
      dependency-version: 4.32.2
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: actions-minor
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Feb 13, 2026
    Configuration menu
    Copy the full SHA
    02a49bd View commit details
    Browse the repository at this point in the history

Commits on Feb 25, 2026

  1. prepare v4 release (#835)

    Signed-off-by: Brian DeHamer <[email protected]>
    bdehamer authored Feb 25, 2026
    Configuration menu
    Copy the full SHA
    e4d4f7c View commit details
    Browse the repository at this point in the history
Loading