<!-- Release notes generated using configuration in .github/release.yml at main -->
What's Changed
Security Fixes
* Fix a bug where attachment file can be replaced on existing records if one of the parent (bucket or collection) gives `"read"` permission (see [GHSA-hvp4-vrv2-8wrq](https://github.com/Kinto/kinto-attachment/security/advisories/GHSA-hvp4-vrv2-8wrq))
Other Changes
* Get ready moving master into main by Natim in https://github.com/Kinto/kinto-attachment/pull/693
* Modernize repo by leplatrem in https://github.com/Kinto/kinto-attachment/pull/710
* Do not run tests if lint fails by leplatrem in https://github.com/Kinto/kinto-attachment/pull/712
* Enable Dependabot on Github Actions versions by leplatrem in https://github.com/Kinto/kinto-attachment/pull/713
**Full Changelog**: https://github.com/Kinto/kinto-attachment/compare/6.3.2...6.4.0