build(deps): bump actions/attest from 36051bcae73b7c2a8a6945a48cbf80953c6baa35 to f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6

[dependabot]

Bumps actions/attest from 36051bcae73b7c2a8a6945a48cbf80953c6baa35 to f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6.

Changelog

Sourced from actions/attest's changelog.

Release Instructions

Follow the steps below to tag a new release for the actions/attest action.

1. Update the version field in package.json.

2. Merge the latest changes to the main branch.

3. Create a new release using a tag of the form vX.X.X following SemVer conventions:

   gh release create vX.X.X

4. Move (or create) the major version tag to point to the same commit tagged above:

   git tag -fa vX -m "vX"
   git push origin vX --force

5. As appropriate, update any actions like actions/attest-build-provenance and actions/attest-sbom which have a dependency on actions/attest

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

• Chores
  • Updated the image attestation process used during container publishing.
  • No user-facing behavior changes.

[coderabbitai]

📝 Walkthrough

Walkthrough

The CI workflow re-pins the actions/attest action used to attest published container images. Existing attestation inputs and behavior remain unchanged.

Changes

CI attestation

Layer / File(s)	Summary
Update attestation action pin .github/workflows/ci.yml	The image attestation step references a different pinned actions/attest commit while retaining its existing inputs.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers: jusso-dev

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the dependency bump for actions/attest shown in the workflow change.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/github_actions/actions/attest-f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6

---

_{Comment @coderabbitai help to get the list of available commands.}

[dependabot]

Looks like actions/attest is up-to-date now, so this is no longer needed.

[jusso-dev]

Traceability: superseded by reviewed rollup PR #35, merged as a37ea88.