Skip to content
Releases

Bump actions/attest-sbom from 3.0.0 to 4.0.0 (#15177) #1673

Sign in to view logs

Bump actions/attest-sbom from 3.0.0 to 4.0.0 (#15177)

Bump actions/attest-sbom from 3.0.0 to 4.0.0 (#15177) #1673

Triggered via push March 14, 2026 08:50
@josevalimjosevalim
pushed 445895c
main
Status Success
Total duration 25m 19s
Artifacts 15

release.yml

on: push
Matrix: build
Create draft release
5s
Create draft release
Matrix: sign
Generate SBoM
8m 56s
Generate SBoM
Upload builds to hex.pm
52s
Upload builds to hex.pm
Upload release
13s
Upload release
Fit to window
Zoom out
Zoom in

Annotations

8 warnings
Ubuntu 24.04, OTP 29.0-rc1
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: erlef/setup-beam@5304e04ea2b355f03681464e683d92e3b2f18451. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Ubuntu 24.04, OTP 28.0 (build docs)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, erlef/setup-beam@5304e04ea2b355f03681464e683d92e3b2f18451. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Ubuntu 24.04, OTP 27.0
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: erlef/setup-beam@5304e04ea2b355f03681464e683d92e3b2f18451. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Sign files, Windows, OTP 28
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830, azure/login@a457da9ea143d694b1b9c7c869ebb04ebe844ef5. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Sign files, Windows, OTP 27
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830, azure/login@a457da9ea143d694b1b9c7c869ebb04ebe844ef5. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Sign files, Windows, OTP 29
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830, azure/login@a457da9ea143d694b1b9c7c869ebb04ebe844ef5. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Generate SBoM
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf, actions/cache@v4, actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Generate SBoM
actions/attest-sbom has been deprecated, please use actions/attest instead

Artifacts

Produced during runtime
Name Size Digest
Attestations
1.12 MB
sha256:52a46a9b1a6724852ddc60ef3b967b0d267969ab072116bcf7bd54b89c2c9ecd
Docs
6.58 MB
sha256:8e96f22cd266c8d457d8a246e72d37f31b3d7cd3f120352e0e0118e30ae5397b
SBoM
81.8 KB
sha256:4c52bbcb08da566c268b88e01f3ce56dae78013c2c8f6d62ca2db4c0cd6a9fea
build-linux-elixir-otp-27
7.93 MB
sha256:7407863f474b9ea005ebf6d383f73f3441f6160d7c12f4a5356b8ba8cc310d33
build-linux-elixir-otp-28
7.9 MB
sha256:694d780822e9cc668fd65b76ebcd4cffa04a892a6c3b8b369da98eca4c3b5480
build-linux-elixir-otp-29
7.91 MB
sha256:a3d10f0e44ae1bff46bd027b534be1da07c370f1ce45deb4aad52746f6021251
build-windows-elixir-otp-27
8.01 MB
sha256:6efc31b52c826d38405775ec74fe6fed9e0a1572eb3f65f686181bbda155d783
build-windows-elixir-otp-28
7.98 MB
sha256:26950cde26a71243ce71c9b325802abbd5a4ef15ccf82f2eaac47332e088182c
build-windows-elixir-otp-29
7.99 MB
sha256:43e0a6e3daafd35e55179867f96d599321dad6a27f9b1d2e4d2c6e19f2c31209
sign-linux-elixir-otp-27
7.93 MB
sha256:f7de10337b8c30073863cb1364710b315fd10262e55b13221a7fcb18dbd358ac
sign-linux-elixir-otp-28
7.9 MB
sha256:8d99c01aa3320faef090d55be0c9a8a9caa731f2fa7351f51c50062191cee07a
sign-linux-elixir-otp-29
7.91 MB
sha256:df6f01bdaca3314a3475e99c89fef9262ca1f7a3fc033099e272110a969c2b58
sign-windows-elixir-otp-27
8.02 MB
sha256:3da7fbcf2c2eb4766634e2ca30de7b9135486de91ffbc69772a8477e9cae6e30
sign-windows-elixir-otp-28
7.99 MB
sha256:de66d29fd6a156de49a818dbd5a2a452dd381170eb3d46d083167aff3357856c
sign-windows-elixir-otp-29
8 MB
sha256:a23f4fe993106662e5ed99ffbada303342701514e1e5b7add84843561b691cd1