From 5f5f1fadff8381b91d33a68b7afaccb4f3e942c7 Mon Sep 17 00:00:00 2001 From: William Woodruff Date: Fri, 28 Nov 2025 21:55:00 -0500 Subject: [PATCH] chore: prep 1.18.0-rc2 release (#1387) Signed-off-by: William Woodruff --- .github/workflows/release-pypi.yml | 4 ---- Cargo.lock | 2 +- crates/zizmor/Cargo.toml | 2 +- 3 files changed, 2 insertions(+), 6 deletions(-) diff --git a/.github/workflows/release-pypi.yml b/.github/workflows/release-pypi.yml index 5bf95612..3079a1a7 100644 --- a/.github/workflows/release-pypi.yml +++ b/.github/workflows/release-pypi.yml @@ -162,10 +162,6 @@ jobs: id-token: write # Trusted Publishing + PEP 740 attestations steps: - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0 - - name: Generate artifact attestation - uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0 - with: - subject-path: "wheels-*/*" - name: Attest uses: astral-sh/attest-action@2c727738cea36d6c97dd85eb133ea0e0e8fe754b # v0.0.4 with: diff --git a/Cargo.lock b/Cargo.lock index d534e580..5c72caef 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -3954,7 +3954,7 @@ dependencies = [ [[package]] name = "zizmor" -version = "1.18.0-rc1" +version = "1.18.0-rc2" dependencies = [ "annotate-snippets", "anstream", diff --git a/crates/zizmor/Cargo.toml b/crates/zizmor/Cargo.toml index d11724f4..3a72861f 100644 --- a/crates/zizmor/Cargo.toml +++ b/crates/zizmor/Cargo.toml @@ -1,7 +1,7 @@ [package] name = "zizmor" description = "Static analysis for GitHub Actions" -version = "1.18.0-rc1" +version = "1.18.0-rc2" repository = "https://github.com/zizmorcore/zizmor" documentation = "https://docs.zizmor.sh" keywords = ["cli", "github-actions", "static-analysis", "security"]