chore: prep 1.18.0-rc2 release (#1387)

Signed-off-by: William Woodruff <william@yossarian.net>

.github/workflows/release-pypi.yml

@@ -162,10 +162,6 @@ jobs:
       id-token: write # Trusted Publishing + PEP 740 attestations
     steps:
       - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
-      - name: Generate artifact attestation
-        uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0
-        with:
-          subject-path: "wheels-*/*"
       - name: Attest
         uses: astral-sh/attest-action@2c727738cea36d6c97dd85eb133ea0e0e8fe754b # v0.0.4
         with:

Cargo.lock

@@ -3954,7 +3954,7 @@ dependencies = [
 
 [[package]]
 name = "zizmor"
-version = "1.18.0-rc1"
+version = "1.18.0-rc2"
 dependencies = [
  "annotate-snippets",
  "anstream",

crates/zizmor/Cargo.toml

@@ -1,7 +1,7 @@
 [package]
 name = "zizmor"
 description = "Static analysis for GitHub Actions"
-version = "1.18.0-rc1"
+version = "1.18.0-rc2"
 repository = "https://github.com/zizmorcore/zizmor"
 documentation = "https://docs.zizmor.sh"
 keywords = ["cli", "github-actions", "static-analysis", "security"]