From 2fcefb7093e6d8a9d38c57a75909958d3902dee4 Mon Sep 17 00:00:00 2001
From: Alessandro Ros <aler9.dev@gmail.com>
Date: Sat, 28 Feb 2026 13:38:03 +0100
Subject: [PATCH] switch to actions/attest (#5528)

---
 .github/workflows/release.yml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 016908ce..77a9f314 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -8,10 +8,9 @@ on:
 permissions:
   id-token: write
   attestations: write
+  artifact-metadata: write
   contents: write
   issues: write
-  discussions: write
-  pull-requests: write
 
 jobs:
   binaries:
@@ -24,7 +23,7 @@ jobs:
 
     - run: cd binaries && sha256sum -b * > checksums.sha256
 
-    - uses: actions/attest-build-provenance@v3
+    - uses: actions/attest@v4
       with:
         subject-path: '${{ github.workspace }}/binaries/*'