chore: harden release CI and backfill v0.4.0 CHANGELOG#69
Merged
Conversation
…et retry) Mirror the sibling aozora repo: bump actions/attest-build-provenance v2.4.0 -> v4.1.0 (Node 20 -> Node 24), pin the windows release runner to windows-2025, and add CARGO_NET_RETRY=10 to x-common-env to ride out transient static.crates.io blips.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Post-v0.4.0 maintenance, mirroring the sibling aozora repo and addressing warnings from the v0.4.0 release run.
CI (
ci:commit)actions/attest-build-provenancev2.4.0→v4.1.0(SHA-pinned): v2.4.0 runs on the deprecated Node 20; v3+ moved to Node 24.subject-pathinput unchanged.windows-latest→windows-2025.CARGO_NET_RETRY: "10"tox-common-envto ride out transientstatic.crates.ioblips.Docs (
docs:commit)[0.4.0]CHANGELOG section, which lagged the latest commits: round-2 playground features (feat(playground): add a light/dark colour-scheme toggle #57–62), build provenance attestation (ci: attest release artifacts with build provenance #64, ci: exempt CI-only rust-cache (LGPL-3.0) from dependency-review license check #66), the aozora v0.4.0 pin, and the deep-nesting stack-overflow fix (fix(security): prevent deep-nesting stack overflow, harden API and CI #65).🤖 Generated with Claude Code