From 30dc750cccefe60303c9eac206f3c54fe8c380ba Mon Sep 17 00:00:00 2001
From: "cachekit-renovate-bot[bot]"
 <287198435+cachekit-renovate-bot[bot]@users.noreply.github.com>
Date: Mon, 28 Sep 2026 15:17:16 +0000
Subject: [PATCH] chore(deps): update actions/attest-sbom action to v4

---
 .github/workflows/release.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0f1c4f5..89a0bec 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -121,7 +121,7 @@ jobs:
           test -s sbom.cdx.json || { echo "::error::SBOM file is empty"; exit 1; }
 
       - name: Attest SBOM
-        uses: actions/attest-sbom@10926c72720ffc3f7b666661c8e55b1344e2a365 # v2
+        uses: actions/attest-sbom@c604332985a26aa8cf1bdc465b92731239ec6b9e # v4
         with:
           subject-path: target/package/*.crate
           sbom-path: sbom.cdx.json