From b1f5fca1def8a6291232a4438a0504829b478b97 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 8 Jan 2026 06:23:26 +0000
Subject: [PATCH] chore(deps): bump actions/attest from 3.0.0 to 3.1.0

Bumps [actions/attest](https://github.com/actions/attest) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/actions/attest/releases)
- [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest/compare/daf44fb950173508f38bd2406030372c1d1162b1...7667f588f2f73a90cea6c7ac70e78266c4f76616)

---
updated-dependencies:
- dependency-name: actions/attest
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 action.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/action.yaml b/action.yaml
index f28f9d2e9..8726b042d 100644
--- a/action.yaml
+++ b/action.yaml
@@ -102,7 +102,7 @@ runs:
 
   - name: Upload Attestation
     if: ${{ inputs.upload_attestation == 'true' && steps.run-macaron-policy-verification.outputs.vsa_report != 'VSA Not Generated.' }}
-    uses: actions/attest@daf44fb950173508f38bd2406030372c1d1162b1 #3.0.0
+    uses: actions/attest@7667f588f2f73a90cea6c7ac70e78266c4f76616 #3.1.0
     with:
       subject-path: ${{ inputs.subject_path }}
       predicate-type: https://slsa.dev/verification_summary/v1