Bump actions/attest-build-provenance from 92c65d2898f1f53cfdc910b962cecff86e7f8fcc to ef244123eb79f2f7a7e75d99086184180e6d0018

[dependabot]

Bumps actions/attest-build-provenance from 92c65d2898f1f53cfdc910b962cecff86e7f8fcc to ef244123eb79f2f7a7e75d99086184180e6d0018.

Changelog

Sourced from actions/attest-build-provenance's changelog.

Release Instructions

Follow the steps below to tag a new release for the actions/attest-build-provenance action.

If changes were made to the internal actions/attest-build-provenance/predicate action (any updates to ./predicate/action.yaml or any of the code in the https://github.com/actions/attest-build-provenance/blob/main/src directory), start with step #1; otherwise, skip directly to step #5.

1. Merge the latest changes to the main branch.

2. Create and push a new predicate tag of the form [email protected] following SemVer conventions:

   git tag -a "[email protected]" -m "[email protected] Release"
   git push --tags

3. Update the reference to the actions/attest-build-provenance/predicate action in action.yml to point to the SHA of the newly created tag.

4. Push the action.yml change and open a PR. Once it has been reviewed, merge the PR and proceed with the release instructions.

5. Create a new release for the top-level action using a tag of the form vX.X.X following SemVer conventions:

   gh release create vX.X.X

6. Move (or create) the major version tag to point to the same commit tagged above:

   git tag -fa vX -m "vX"
   git push origin vX --force

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)