Commit 41b68c3fd for imagemagick.org

commit 41b68c3fddafa15292aa07715d80c973ed4572a4
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Thu Jul 23 17:08:29 2026 +0200

    build(deps): bump actions/attest from 4.1.1 to 4.2.0 (#8880)

    Bumps [actions/attest](https://github.com/actions/attest) from 4.1.1 to 4.2.0.
    - [Release notes](https://github.com/actions/attest/releases)
    - [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md)
    - [Commits](https://github.com/actions/attest/compare/a1948c3f048ba23858d222213b7c278aabede763...f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6)

    ---
    updated-dependencies:
    - dependency-name: actions/attest
      dependency-version: 4.2.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...

    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index bdc87327b..55632562a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -606,7 +606,7 @@ jobs:

       - name: Generate SLSA provenance
         id: attest
-        uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 #v4.1.1
+        uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 #v4.2.0
         with:
           subject-path: |
             ${{github.workspace}}/artifacts/*.7z