Commit 719ad3323 for imagemagick.org

commit 719ad3323e96772b83c2805c9080e3699a7495f8
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Wed Aug 5 17:49:23 2026 +0200

    build(deps): bump actions/attest from 4.2.0 to 4.2.1 (#8904)

    Bumps [actions/attest](https://github.com/actions/attest) from 4.2.0 to 4.2.1.
    - [Release notes](https://github.com/actions/attest/releases)
    - [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md)
    - [Commits](https://github.com/actions/attest/compare/f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6...508db95dd578ae2727ebd6217d5ba78e4fbda05d)

    ---
    updated-dependencies:
    - dependency-name: actions/attest
      dependency-version: 4.2.1
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...

    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b4aaf7a53..84fa2ede3 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -606,7 +606,7 @@ jobs:

       - name: Generate SLSA provenance
         id: attest
-        uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 #v4.2.0
+        uses: actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d #v4.2.1
         with:
           subject-path: |
             ${{github.workspace}}/artifacts/*.7z