Merge pull request #667 from fluxcd/dependabot/github_actions/ci-19f2…

…7f8c08 Bump the ci group with 2 updates
fluxcd · Apr 23, 2024 · 78d4f2e · 78d4f2e
2 parents 3edd381 + 43f6a1f
commit 78d4f2e
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -57,7 +57,7 @@ jobs:
       actions: read # To read the workflow path.
       id-token: write # To sign the provenance.
       contents: write # To add assets to the release.
-    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.10.0
+    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0
     with:
       provenance-name: "provenance.intoto.jsonl"
       base64-subjects: "${{ needs.goreleaser.outputs.hashes }}"

diff --git a/.github/workflows/update.yaml b/.github/workflows/update.yaml
@@ -45,7 +45,7 @@ jobs:
           echo "pr_title=$PR_TITLE" >> $GITHUB_OUTPUT
       - name: Create Pull Request
         id: cpr
-        uses: peter-evans/create-pull-request@c55203cfde3e5c11a452d352b4393e68b85b4533 # v6.0.3
+        uses: peter-evans/create-pull-request@9153d834b60caba6d51c9b9510b087acf9f33f83 # v6.0.4
         with:
             token: ${{ secrets.BOT_GITHUB_TOKEN }}
             commit-message: |