Follow the steps below to tag a new release for the actions/attest action.
-
Update the
versionfield in package.json. -
Merge the latest changes to the
mainbranch. -
Create a new release using a tag of the form
vX.X.Xfollowing SemVer conventions:gh release create vX.X.X
-
Move (or create) the major version tag to point to the same commit tagged above:
git tag -fa vX -m "vX" git push origin vX --force -
As appropriate, update any actions like
actions/attest-build-provenanceandactions/attest-sbomwhich have a dependency onactions/attest