attest/RELEASE.md

Release Instructions

Follow the steps below to tag a new release for the actions/attest action.

1. Update the version field in package.json.

2. Merge the latest changes to the main branch.

3. Create a new release using a tag of the form vX.X.X following SemVer conventions:

   gh release create vX.X.X
   

4. Move (or create) the major version tag to point to the same commit tagged above:

   git tag -fa vX -m "vX"
   git push origin vX --force
   

5. As appropriate, update any actions like actions/attest-build-provenance and actions/attest-sbom which have a dependency on actions/attest