Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: actions/attest-build-provenance
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v3.1.0
Choose a base ref
...
head repository: actions/attest-build-provenance
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v3.2.0
Choose a head ref
  • 6 commits
  • 6 files changed
  • 4 contributors

Commits on Jan 2, 2026

  1. Bump the npm-development group with 3 updates (#783)

    Bumps the npm-development group with 3 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint).
    
    
    Updates `@types/node` from 25.0.2 to 25.0.3
    - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
    - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)
    
    Updates `eslint-plugin-jest` from 29.5.0 to 29.6.0
    - [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
    - [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
    - [Commits](jest-community/eslint-plugin-jest@v29.5.0...v29.6.0)
    
    Updates `typescript-eslint` from 8.49.0 to 8.50.0
    - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
    - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
    - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.50.0/packages/typescript-eslint)
    
    ---
    updated-dependencies:
    - dependency-name: "@types/node"
      dependency-version: 25.0.3
      dependency-type: direct:development
      update-type: version-update:semver-patch
      dependency-group: npm-development
    - dependency-name: eslint-plugin-jest
      dependency-version: 29.6.0
      dependency-type: direct:development
      update-type: version-update:semver-minor
      dependency-group: npm-development
    - dependency-name: typescript-eslint
      dependency-version: 8.50.0
      dependency-type: direct:development
      update-type: version-update:semver-minor
      dependency-group: npm-development
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Jan 2, 2026
    Configuration menu
    Copy the full SHA
    405d0ea View commit details
    Browse the repository at this point in the history

Commits on Jan 5, 2026

  1. Bump the npm-development group with 2 updates (#795)

    Bumps the npm-development group with 2 updates: [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint).
    
    
    Updates `eslint-plugin-jest` from 29.6.0 to 29.12.1
    - [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
    - [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
    - [Commits](jest-community/eslint-plugin-jest@v29.6.0...v29.12.1)
    
    Updates `typescript-eslint` from 8.50.0 to 8.51.0
    - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
    - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
    - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.51.0/packages/typescript-eslint)
    
    ---
    updated-dependencies:
    - dependency-name: eslint-plugin-jest
      dependency-version: 29.12.1
      dependency-type: direct:development
      update-type: version-update:semver-minor
      dependency-group: npm-development
    - dependency-name: typescript-eslint
      dependency-version: 8.51.0
      dependency-type: direct:development
      update-type: version-update:semver-minor
      dependency-group: npm-development
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Jan 5, 2026
    Configuration menu
    Copy the full SHA
    3bc61af View commit details
    Browse the repository at this point in the history
  2. Bump github/codeql-action in the actions-minor group (#782)

    Bumps the actions-minor group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).
    
    
    Updates `github/codeql-action` from 4.31.8 to 4.31.9
    - [Release notes](https://github.com/github/codeql-action/releases)
    - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
    - [Commits](github/codeql-action@1b168cd...5d4e8d1)
    
    ---
    updated-dependencies:
    - dependency-name: github/codeql-action
      dependency-version: 4.31.9
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: actions-minor
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Jan 5, 2026
    Configuration menu
    Copy the full SHA
    63e6444 View commit details
    Browse the repository at this point in the history

Commits on Jan 9, 2026

  1. Bump @actions/core from 1.11.1 to 2.0.1 (#776)

    * Bump @actions/core from 1.11.1 to 2.0.1
    
    Dependabot couldn't find the original pull request head commit, 51395a1.
    
    * rebuild dist
    
    Signed-off-by: Brian DeHamer <bdehamer@github.com>
    
    ---------
    
    Signed-off-by: Brian DeHamer <bdehamer@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    Co-authored-by: Brian DeHamer <bdehamer@github.com>
    dependabot[bot] and bdehamer authored Jan 9, 2026
    Configuration menu
    Copy the full SHA
    98f3aa9 View commit details
    Browse the repository at this point in the history

Commits on Jan 16, 2026

  1. Add more documentation on Artifact Metadata Storage Records (#797)

    * add section on artifact storage records
    
    Signed-off-by: Meredith Lancaster <malancas@github.com>
    
    * reorganize storage record section
    
    Signed-off-by: Meredith Lancaster <malancas@github.com>
    
    * add additional requirements for record generation
    
    Signed-off-by: Meredith Lancaster <malancas@github.com>
    
    * typo
    
    Signed-off-by: Meredith Lancaster <malancas@github.com>
    
    * wording
    
    Signed-off-by: Meredith Lancaster <malancas@github.com>
    
    * Update README.md
    
    Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
    
    * lines should not exceed 80 characters
    
    Signed-off-by: Meredith Lancaster <malancas@github.com>
    
    * Update README.md
    
    Co-authored-by: Brian DeHamer <bdehamer@github.com>
    
    * line wrapping linting
    
    Signed-off-by: Meredith Lancaster <malancas@github.com>
    
    ---------
    
    Signed-off-by: Meredith Lancaster <malancas@github.com>
    Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
    Co-authored-by: Brian DeHamer <bdehamer@github.com>
    3 people authored Jan 16, 2026
    Configuration menu
    Copy the full SHA
    6865550 View commit details
    Browse the repository at this point in the history

Commits on Jan 26, 2026

  1. Update actions/attest to latest version v3.2.0 (#812)

    * update actions/attest to latest version
    
    Signed-off-by: Meredith Lancaster <malancas@github.com>
    
    * regenerate package-lock
    
    Signed-off-by: Meredith Lancaster <malancas@github.com>
    
    ---------
    
    Signed-off-by: Meredith Lancaster <malancas@github.com>
    malancas authored Jan 26, 2026
    Configuration menu
    Copy the full SHA
    96278af View commit details
    Browse the repository at this point in the history
Loading