From ab7886861d4ca3679ee7cc5e38dcf3e2982834b4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 10 Jul 2026 16:54:49 +0000
Subject: [PATCH] chore(deps): bump actions/attest from 2 to 4

Bumps [actions/attest](https://github.com/actions/attest) from 2 to 4.
- [Release notes](https://github.com/actions/attest/releases)
- [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest/compare/v2...v4)

---
updated-dependencies:
- dependency-name: actions/attest
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 action.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/action.yml b/action.yml
index 37b40fcc..61895acd 100644
--- a/action.yml
+++ b/action.yml
@@ -89,7 +89,7 @@ runs:
 
     - name: Sign the receipt
       if: ${{ always() && inputs.receipt == 'true' }}
-      uses: actions/attest@v2
+      uses: actions/attest@v4
       with:
         subject-name: gate-integrity
         predicate-type: 'https://modonome.com/attestation/gate-integrity/v1'
@@ -113,7 +113,7 @@ runs:
 
     - name: Sign the AgentProof attestation
       if: ${{ always() && inputs.agentproof == 'true' }}
-      uses: actions/attest@v2
+      uses: actions/attest@v4
       with:
         subject-name: agentproof-conformance
         predicate-type: 'https://modonome.com/attestation/agentproof-conformance/v1'