From cb81433b01f69f2885af485726cd69ad28c76bb1 Mon Sep 17 00:00:00 2001 From: Chentao Yang Date: Tue, 23 Jun 2026 21:51:34 +0200 Subject: [PATCH] Add release artifact attestations --- .github/workflows/release.yml | 14 +++++- yarn.lock | 87 ++++++++++++++++++++++++++--------- 2 files changed, 78 insertions(+), 23 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 763fae4..477a6d7 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -7,6 +7,8 @@ on: permissions: contents: write + id-token: write + attestations: write jobs: build: @@ -24,7 +26,15 @@ jobs: run: npm ci - name: Build plugin - run: npm run build:nolint + run: npm run build + + - name: Attest release assets + uses: actions/attest@v4 + with: + subject-path: | + main.js + manifest.json + styles.css - name: Upload release assets uses: softprops/action-gh-release@v2 @@ -32,4 +42,4 @@ jobs: files: | main.js manifest.json - styles.css + styles.css \ No newline at end of file diff --git a/yarn.lock b/yarn.lock index 326a6b0..0266de0 100644 --- a/yarn.lock +++ b/yarn.lock @@ -19,6 +19,11 @@ style-mod "^4.1.0" w3c-keyname "^2.2.4" +"@esbuild/darwin-arm64@0.28.1": + version "0.28.1" + resolved "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.28.1.tgz" + integrity sha512-TZbWkQY7kvTAXbXUT7uVACR5cMHsDiSz9z7ZKAX/RTq/WJEk3QyRr0wZpNhBDX+/0CtdqUIJlOiodQcta6tY3Q== + "@eslint-community/eslint-utils@^4.8.0", "@eslint-community/eslint-utils@^4.9.1": version "4.9.1" resolved "https://registry.npmjs.org/@eslint-community/eslint-utils/-/eslint-utils-4.9.1.tgz" @@ -93,9 +98,9 @@ resolved "https://registry.npmjs.org/@humanfs/types/-/types-0.15.0.tgz" integrity sha512-ZZ1w0aoQkwuUuC7Yf+7sdeaNfqQiiLcSRbfI08oAxqLtpXQr9AIVX7Ay7HLDuiLYAaFPu8oBYNq/QIi9URHJ3Q== -"@humanwhocodes/module-importer@^1.1.0": - version "1.1.0" - resolved "https://registry.npmjs.org/@humanwhocodes/module-importer/-/module-importer-1.1.0.tgz" +"@humanwhocodes/module-importer@^1.0.1": + version "1.0.1" + resolved "https://registry.npmjs.org/@humanwhocodes/module-importer/-/module-importer-1.0.1.tgz" integrity sha512-bxveV4V8v5Yb4ncFTT3rPSgZBOpCkjfK0y4oVVVJwIuDVBRMDXrPyXRL988i5ap9m9bnyEEjWfm5WkBmtffLfA== "@humanwhocodes/retry@^0.4.0", "@humanwhocodes/retry@^0.4.2": @@ -376,6 +381,38 @@ es-errors@^1.3.0: resolved "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz" integrity sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw== +esbuild@~0.28.0: + version "0.28.1" + resolved "https://registry.npmjs.org/esbuild/-/esbuild-0.28.1.tgz" + integrity sha512-HrJrvZv5ayxBzPfwphOoNzkzOIIlifzk0KJrGK2c8R4+LKpMtpYLQeUdjnwjWv/LZlkH2laZk+4w78pi99D4Vw== + optionalDependencies: + "@esbuild/aix-ppc64" "0.28.1" + "@esbuild/android-arm" "0.28.1" + "@esbuild/android-arm64" "0.28.1" + "@esbuild/android-x64" "0.28.1" + "@esbuild/darwin-arm64" "0.28.1" + "@esbuild/darwin-x64" "0.28.1" + "@esbuild/freebsd-arm64" "0.28.1" + "@esbuild/freebsd-x64" "0.28.1" + "@esbuild/linux-arm" "0.28.1" + "@esbuild/linux-arm64" "0.28.1" + "@esbuild/linux-ia32" "0.28.1" + "@esbuild/linux-loong64" "0.28.1" + "@esbuild/linux-mips64el" "0.28.1" + "@esbuild/linux-ppc64" "0.28.1" + "@esbuild/linux-riscv64" "0.28.1" + "@esbuild/linux-s390x" "0.28.1" + "@esbuild/linux-x64" "0.28.1" + "@esbuild/netbsd-arm64" "0.28.1" + "@esbuild/netbsd-x64" "0.28.1" + "@esbuild/openbsd-arm64" "0.28.1" + "@esbuild/openbsd-x64" "0.28.1" + "@esbuild/openharmony-arm64" "0.28.1" + "@esbuild/sunos-x64" "0.28.1" + "@esbuild/win32-arm64" "0.28.1" + "@esbuild/win32-ia32" "0.28.1" + "@esbuild/win32-x64" "0.28.1" + escape-string-regexp@^4.0.0: version "4.0.0" resolved "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz" @@ -418,7 +455,7 @@ eslint@^10.0.0, "eslint@^6.0.0 || ^7.0.0 || >=8.0.0", "eslint@^8.57.0 || ^9.0.0 "@eslint/core" "^1.2.1" "@eslint/plugin-kit" "^0.7.2" "@humanfs/node" "^0.16.6" - "@humanwhocodes/module-importer" "^1.1.0" + "@humanwhocodes/module-importer" "^1.0.1" "@humanwhocodes/retry" "^0.4.2" "@types/estree" "^1.0.6" ajv "^6.14.0" @@ -437,7 +474,7 @@ eslint@^10.0.0, "eslint@^6.0.0 || ^7.0.0 || >=8.0.0", "eslint@^8.57.0 || ^9.0.0 ignore "^5.2.0" imurmurhash "^0.1.4" is-glob "^4.0.0" - json-stable-stringify-without-jsonify "^1.1.0" + json-stable-stringify-without-jsonify "^1.0.1" minimatch "^10.2.4" natural-compare "^1.4.0" optionator "^0.9.3" @@ -528,6 +565,11 @@ flatted@^3.2.9: resolved "https://registry.npmjs.org/flatted/-/flatted-3.4.2.tgz" integrity sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA== +fsevents@~2.3.2, fsevents@~2.3.3: + version "2.3.3" + resolved "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz" + integrity sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw== + function-bind@^1.1.2: version "1.1.2" resolved "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz" @@ -608,9 +650,9 @@ json-schema-traverse@^0.4.1: resolved "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz" integrity sha512-xbbCH5dCYU5T8LcEhhuh7HJ88HXuW3qsI3Y0zOZFKfZEHcpWiHU/Jxzk629Brsab/mMiHQti9wMP+845RPe3Vg== -json-stable-stringify-without-jsonify@^1.1.0: - version "1.1.0" - resolved "https://registry.npmjs.org/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.1.0.tgz" +json-stable-stringify-without-jsonify@^1.0.1: + version "1.0.1" + resolved "https://registry.npmjs.org/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz" integrity sha512-Bdboy+l7tA3OGW6FjyFHWkP5LuByj1Tk33Ljyq0axyzdk9//JSi2u3fP1QSmd1KNwq6VOKYGlAu87CisVir6Pw== keyv@^4.5.4: @@ -642,14 +684,7 @@ magic-string@^0.30.3: dependencies: "@jridgewell/sourcemap-codec" "^1.5.5" -minimatch@^10.2.2: - version "10.2.5" - resolved "https://registry.npmjs.org/minimatch/-/minimatch-10.2.5.tgz" - integrity sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg== - dependencies: - brace-expansion "^5.0.5" - -minimatch@^10.2.4: +minimatch@^10.2.2, minimatch@^10.2.4: version "10.2.5" resolved "https://registry.npmjs.org/minimatch/-/minimatch-10.2.5.tgz" integrity sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg== @@ -679,17 +714,18 @@ obsidian-daily-notes-interface@0.9.2: obsidian "github:obsidianmd/obsidian-api#master" tslib "2.1.0" -"obsidian@github:obsidianmd/obsidian-api#master": +obsidian@1.13.1: version "1.13.1" - resolved "git+ssh://git@github.com/obsidianmd/obsidian-api.git#28a6b8607927249cb549ab3053f5f36f9287aab8" + resolved "https://registry.npmjs.org/obsidian/-/obsidian-1.13.1.tgz" + integrity sha512-qtTEA2pmhJzhuhJqzbBFRYhpIOqvW+krDYjtFynv66KbxBbumHBlsJfWw3I4jtnK/6fZwbQhCrmmDdRwXmX56w== dependencies: "@types/codemirror" "5.60.8" moment "2.29.4" -obsidian@latest: +"obsidian@github:obsidianmd/obsidian-api#master": version "1.13.1" - resolved "https://registry.npmjs.org/obsidian/-/obsidian-1.13.1.tgz" - integrity sha512-qtTEA2pmhJzhuhJqzbBFRYhpIOqvW+krDYjtFynv66KbxBbumHBlsJfWw3I4jtnK/6fZwbQhCrmmDdRwXmX56w== + resolved "git+ssh://git@github.com/obsidianmd/obsidian-api.git" + integrity sha512-NgY7YPSB3Y1AidBe5zEJkzBr/poFRPiNegw5UY6uhrXC3Hz0YHST3jnSxpE9THGWc+FBzE2yXraL+vIW7FjUjg== dependencies: "@types/codemirror" "5.60.8" moment "2.29.4" @@ -849,6 +885,15 @@ tslib@2.1.0: resolved "https://registry.npmjs.org/tslib/-/tslib-2.1.0.tgz" integrity sha512-hcVC3wYEziELGGmEEXue7D75zbwIIVUMWAVbHItGPx0ziyXxrOMQx4rQEVEV45Ut/1IotuEvwqPopzIOkDMf0A== +tsx@4.22.4: + version "4.22.4" + resolved "https://registry.npmjs.org/tsx/-/tsx-4.22.4.tgz" + integrity sha512-X8EX+XV4QR5xCsrgxaED954zTDfY8KqlDtskKEL0cHhyS/P8b4IFOvGDQpsC9Q1XnLq915wEfwwY/zzskCtmhg== + dependencies: + esbuild "~0.28.0" + optionalDependencies: + fsevents "~2.3.3" + type-check@^0.4.0, type-check@~0.4.0: version "0.4.0" resolved "https://registry.npmjs.org/type-check/-/type-check-0.4.0.tgz"