From 563f819f9656e177b70ac3c536e8b6aa38888361 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 26 Aug 2026 11:32:29 +0000
Subject: [PATCH] chore(github-tag): update tag actions/attest-build-provenance
 to v4

---
 .github/workflows/build-image.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build-image.yml b/.github/workflows/build-image.yml
index 91628b9..455a8ef 100644
--- a/.github/workflows/build-image.yml
+++ b/.github/workflows/build-image.yml
@@ -291,7 +291,7 @@ jobs:
 
       - name: Attest build provenance (SLSA) for produced images
         if: ${{ inputs.skip_heavy_build == false && hashFiles('out/*.zip', 'out/*.7z', 'out/*.iso') != '' }}
-        uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2.4.0
+        uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4.2.2
         with:
           subject-path: |
             out/*.zip