diff --git a/.github/release-notes/5.0.3.md b/.github/release-notes/5.0.3.md
new file mode 100644
index 00000000..7aa2f649
--- /dev/null
+++ b/.github/release-notes/5.0.3.md
@@ -0,0 +1,3 @@
+## Changes
+
+- Release assets now carry individually verifiable provenance attestations.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 103214a7..9a6a9984 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -56,13 +56,20 @@ jobs:
       - name: Run checks and build
         run: npm run check
 
-      - name: Generate artifact attestations
+      - name: Generate main.js artifact attestation
         uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4
         with:
-          subject-path: |
-            main.js
-            manifest.json
-            styles.css
+          subject-path: main.js
+
+      - name: Generate manifest.json artifact attestation
+        uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4
+        with:
+          subject-path: manifest.json
+
+      - name: Generate styles.css artifact attestation
+        uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4
+        with:
+          subject-path: styles.css
 
       - name: Create GitHub release
         env:
diff --git a/manifest.json b/manifest.json
index 06d79f69..3993f369 100644
--- a/manifest.json
+++ b/manifest.json
@@ -1,7 +1,7 @@
 {
   "id": "codex-panel",
   "name": "Codex Panel",
-  "version": "5.0.2",
+  "version": "5.0.3",
   "minAppVersion": "1.12.0",
   "description": "Codex in your sidebar.",
   "author": "murashit",
diff --git a/package-lock.json b/package-lock.json
index b1349682..d54a0a8b 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "codex-panel",
-  "version": "5.0.2",
+  "version": "5.0.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "codex-panel",
-      "version": "5.0.2",
+      "version": "5.0.3",
       "license": "Apache-2.0",
       "dependencies": {
         "@tanstack/query-core": "^5.101.2",
diff --git a/package.json b/package.json
index 589e4682..4595384a 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "codex-panel",
-  "version": "5.0.2",
+  "version": "5.0.3",
   "description": "Codex in your Obsidian sidebar.",
   "main": "main.js",
   "author": "murashit",
diff --git a/versions.json b/versions.json
index 6aa497df..8e243bdb 100644
--- a/versions.json
+++ b/versions.json
@@ -81,5 +81,6 @@
   "4.7.1": "1.12.0",
   "5.0.0": "1.12.0",
   "5.0.1": "1.12.0",
-  "5.0.2": "1.12.0"
+  "5.0.2": "1.12.0",
+  "5.0.3": "1.12.0"
 }