emdash-cms/emdash @emdash-cms/registry-verification@0.3.4

on GitHub

Patch Changes

• #3941 8450114 Thanks @swissky! - Fixes installing and updating registry plugins whose releases were attested with actions/attest-build-provenance v3, including releases from the workflow that emdash-plugin release setup generates. These installs previously failed with "release provenance could not be verified". Provenance in both GitHub formats is now accepted, and releases built on self-hosted runners are still rejected.

• #3943 f223ecd Thanks @ascorbic! - Fixes publishing and installing registry plugins attested by a GitHub Actions reusable workflow in the same repository and ref as its calling workflow. These releases previously failed with PROVENANCE_UNVERIFIABLE because the caller and signer were treated as the same workflow.

• Updated dependencies [2c8c12a, 2210c2c]:

  • @emdash-cms/plugin-types@0.6.0