chore: prep for 1.4.0 release (#565)

Cargo.lock

@@ -3151,7 +3151,7 @@ dependencies = [
 
 [[package]]
 name = "zizmor"
-version = "1.3.1"
+version = "1.4.0"
 dependencies = [
  "annotate-snippets",
  "anstream",

Cargo.toml

@@ -1,7 +1,7 @@
 [package]
 name = "zizmor"
 description = "Static analysis for GitHub Actions"
-version = "1.3.1"
+version = "1.4.0"
 edition = "2021"
 repository = "https://github.com/woodruffw/zizmor"
 homepage = "https://github.com/woodruffw/zizmor"

docs/release-notes.md

@@ -9,6 +9,13 @@ of `zizmor`.
 
 ## Next (UNRELEASED)
 
+## v1.4.0
+
+This release comes with one new audit ([unredacted-secrets]), plus a handful
+of bugfixes and analysis improvements to existing audits. It also comes
+with improvements to SARIF presentation, ignore comments, as well as an
+[official Docker image](https://ghcr.io/woodruffw/zizmor)!
+
 ### New Features 🌈
 
 * `zizmor` now has official Docker images! You can find them on the

docs/usage.md

@@ -463,7 +463,7 @@ To do so, add the following to your `.pre-commit-config.yaml` `repos` section:
 
 ```yaml
 - repo: https://github.com/woodruffw/zizmor-pre-commit
-  rev: v1.3.1 # (1)!
+  rev: v1.4.0 # (1)!
   hooks:
   - id: zizmor
 ```