trganda 117061558d ci: add SLSA build provenance and bump action versions ... - Add actions/attest-build-provenance@v4 to generate SLSA v1.0 build provenance for main.js, manifest.json, styles.css and the release zip. The attestation is sigstore-signed via GitHub's OIDC token and is verifiable with `gh attestation verify <file> --owner trganda`. - Grant the additional permissions the action needs: id-token: write (to mint the OIDC token) and attestations: write (to upload the attestation). - Bump action versions: actions/checkout v3 -> v6, actions/setup-node v3 -> v6, pnpm/action-setup v4 -> v6, mikepenz/release-changelog- builder-action v3 -> v6. ncipollo/release-action stays on v1 (still its current major). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>		2026-05-17 15:11:18 +08:00
..
workflows	ci: add SLSA build provenance and bump action versions	2026-05-17 15:11:18 +08:00
FUNDING.yml	Create FUNDING.yml	2024-07-16 13:41:29 +08:00