sirwanafifi_inkplane/versions.json
Sirwan Afifi bf23ed7bd0 release: 0.2.9 with attestation propagation gate
Prior releases published ~3s after attesting, so Obsidian's dashboard could
scan the release before the attestation propagated to GitHub's public API and
cache a failed verdict — matching a same-day report from another plugin author
where every post-hoc check (gh attestation verify, one attestation per digest,
matching repo/commit) passed yet the dashboard still failed.

- Gate release creation on gh attestation verify succeeding against the public
  API (retry loop), so we never publish before the attestation is queryable.
- Upgrade to actions/attest-build-provenance@v4.
- Fresh 0.2.9 asset digests (styles.css comment + main.js version banner) so
  the new scan runs against digests with a single clean attestation.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-17 16:17:36 +01:00

13 lines
223 B
JSON

{
"0.1.0": "1.7.2",
"0.2.0": "1.7.2",
"0.2.1": "1.7.2",
"0.2.2": "1.7.2",
"0.2.3": "1.7.2",
"0.2.4": "1.7.2",
"0.2.5": "1.7.2",
"0.2.6": "1.7.2",
"0.2.7": "1.7.2",
"0.2.8": "1.7.2",
"0.2.9": "1.7.2"
}