From 4e4a9e5e59df2b320b27879f7a0e86d778f33223 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 21 May 2026 02:20:45 +0000 Subject: [PATCH] ci(deps): bump softprops/action-gh-release from 2 to 3 Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2 to 3. - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/v2...v3) --- updated-dependencies: - dependency-name: softprops/action-gh-release dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/cosign-release.yml | 2 +- .github/workflows/sbom.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/cosign-release.yml b/.github/workflows/cosign-release.yml index 28c1e1e..696b4f3 100644 --- a/.github/workflows/cosign-release.yml +++ b/.github/workflows/cosign-release.yml @@ -83,7 +83,7 @@ jobs: - name: Attach signatures to release if: github.event_name == 'release' - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@v3 with: files: | ${{ inputs.artifact-glob }}.sig diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml index 1973cd9..0d837f8 100644 --- a/.github/workflows/sbom.yml +++ b/.github/workflows/sbom.yml @@ -69,6 +69,6 @@ jobs: - name: Attach SBOM to release if: github.event_name == 'release' - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@v3 with: files: ${{ inputs.target-dir }}/${{ inputs.output-name }}.cdx.json