chore(release): 5.0.3

.github/release-notes/5.0.3.md

@@ -0,0 +1,3 @@
+## Changes
+
+- Release assets now carry individually verifiable provenance attestations.

.github/workflows/release.yml

@@ -56,13 +56,20 @@ jobs:
       - name: Run checks and build
         run: npm run check
 
-      - name: Generate artifact attestations
+      - name: Generate main.js artifact attestation
         uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4
         with:
-          subject-path: |
-            main.js
-            manifest.json
-            styles.css
+          subject-path: main.js
+
+      - name: Generate manifest.json artifact attestation
+        uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4
+        with:
+          subject-path: manifest.json
+
+      - name: Generate styles.css artifact attestation
+        uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4
+        with:
+          subject-path: styles.css
 
       - name: Create GitHub release
         env:

manifest.json

@@ -1,7 +1,7 @@
 {
   "id": "codex-panel",
   "name": "Codex Panel",
-  "version": "5.0.2",
+  "version": "5.0.3",
   "minAppVersion": "1.12.0",
   "description": "Codex in your sidebar.",
   "author": "murashit",

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "codex-panel",
-  "version": "5.0.2",
+  "version": "5.0.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "codex-panel",
-      "version": "5.0.2",
+      "version": "5.0.3",
       "license": "Apache-2.0",
       "dependencies": {
         "@tanstack/query-core": "^5.101.2",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-panel",
-  "version": "5.0.2",
+  "version": "5.0.3",
   "description": "Codex in your Obsidian sidebar.",
   "main": "main.js",
   "author": "murashit",

versions.json

@@ -81,5 +81,6 @@
   "4.7.1": "1.12.0",
   "5.0.0": "1.12.0",
   "5.0.1": "1.12.0",
-  "5.0.2": "1.12.0"
+  "5.0.2": "1.12.0",
+  "5.0.3": "1.12.0"
 }