Merge branch 'main' into dependabot/pip/idna-3.15

Author: kevinbackhouse

.github/workflows/publish-to-testpypi.yaml

@@ -79,7 +79,7 @@ jobs:
         path: ./dist/
 
     - name: Attest build provenance
-      uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0
+      uses: actions/attest@v4.1.0 # immutable release
       with:
         subject-path: ./dist/*
 

examples/model_configs/model_config.yaml

@@ -5,5 +5,7 @@ seclab-taskflow-agent:
   version: "1.0"
   filetype: model_config
 models:
-  gpt_default: gpt-4.1
-
+  gpt_default: gpt-5.4-mini
+model_settings:
+  gpt_default:
+    api_type: responses

examples/model_configs/responses_api.yaml

@@ -9,7 +9,7 @@ seclab-taskflow-agent:
   version: "1.0"
   filetype: model_config
 models:
-  gpt_responses: gpt-5-mini
+  gpt_responses: gpt-5.4
 model_settings:
   gpt_responses:
     api_type: responses