chore: prep release → 0.11.2

- chore: bump version for module
- chore: update readme version info
- chore: issue release tarballs, sign, upload to sigstore
- chore: drop tests and other irrelevant material from release

Signed-off-by: Sam Gammon <[email protected]>

Author: sgammon

.gitattributes

@@ -0,0 +1,29 @@
+README.md export-ignore
+SECURITY.md export-ignore
+commitlint.config.js export-ignore
+pnpm-lock.yaml export-ignore
+pom.xml export-ignore
+local.bazelrc.inert export-ignore
+.aspect/bazelrc/ export-ignore
+.bazelci/ export-ignore
+.bcr/ export-ignore
+.github/ export-ignore
+.husky/ export-ignore
+docs/ export-ignore
+tools/ export-ignore
+.bazelignore export-ignore
+.bazelproject export-ignore
+.bazelrc export-ignore
+.bazelversion export-ignore
+.gitignore export-ignore
+.pre-commit-config.yaml export-ignore
+.prettierignore export-ignore
+.gitattributes export-ignore
+.prettierrc export-ignore
+.prettierrc.json export-ignore
+go.mod export-ignore
+go.sum export-ignore
+Makefile export-ignore
+package.json export-ignore
+example/ export-ignore
+version.bazelrc export-ignore

.github/workflows/check.scorecards.yml

@@ -33,6 +33,7 @@ jobs:
           results_file: results.sarif
           results_format: sarif
           publish_results: true
+          repo_token: ${{ secrets.SCORECARD_TOKEN }}
       - name: "Upload artifact"
         uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
         with:

.github/workflows/release_prep.sh

@@ -7,7 +7,7 @@ set -o errexit -o nounset -o pipefail
 TAG=${GITHUB_REF_NAME}
 # The prefix is chosen to match what GitHub generates for source archives
 PREFIX="rules_graalvm-${TAG:1}"
-ARCHIVE="rules_graalvm-$TAG.tar.gz"
+ARCHIVE="rules_graalvm-$TAG.tgz"
 git archive --format=tar --prefix=${PREFIX}/ ${TAG} | gzip > $ARCHIVE
 SHA=$(shasum -a 256 $ARCHIVE | awk '{print $1}')
 

MODULE.bazel

@@ -2,7 +2,7 @@
 
 module(
     name = "rules_graalvm",
-    version = "0.11.1",
+    version = "0.11.2",
 )
 
 ## JVM version to target.
@@ -18,7 +18,7 @@ GRAALVM_VERSION = "21.0.2"
 GRAALVM_DIST = "ce"
 
 ## GraalVM SDK version.
-GRAALVM_SDK_VERSION = "23.1.2"
+GRAALVM_SDK_VERSION = "24.0.1"
 
 ##
 ## Dependencies: API

MODULE.bazel.lock

@@ -9,7 +9,7 @@
 
 ---
 
-> Latest release: [`0.11.1`](https://registry.bazel.build/modules/rules_graalvm)
+> Latest release: [`0.11.2`](https://registry.bazel.build/modules/rules_graalvm)
 
 Use [GraalVM](https://graalvm.org) with [Bazel](https://bazel.build) to:
 
@@ -47,16 +47,16 @@ Use [GraalVM](https://graalvm.org) with [Bazel](https://bazel.build) to:
 
 | Artifact                   | SHA256                                                             |
 | -------------------------- | ------------------------------------------------------------------ |
-| `rules_graalvm-0.11.1.zip` | `e4fa275b062dcd03b1ecb02bb25f01ead512023006a874a5e0c2cb78ba6d8e73` |
-| `rules_graalvm-0.11.1.tgz` | `0128b4a8664974689fadae56b517de627c5f42141925111baf05dc91c37af1c0` |
+| `rules_graalvm-0.11.2.zip` | `23ad095cb9fb84d37dc47ff7d8aeaa094bbd2f4475a7194b737e3f7a2deb99d4` |
+| `rules_graalvm-0.11.2.tgz` | `4f7c5cb43a5a08cc9f957ba44481dbb2fefe93eabc22e4b240564580879de93f` |
 
 ```starlark
 http_archive(
     name = "rules_graalvm",
-    sha256 = "e4fa275b062dcd03b1ecb02bb25f01ead512023006a874a5e0c2cb78ba6d8e73",
-    strip_prefix = "rules_graalvm-0.11.1",
+    sha256 = "23ad095cb9fb84d37dc47ff7d8aeaa094bbd2f4475a7194b737e3f7a2deb99d4",
+    strip_prefix = "rules_graalvm-0.11.2",
     urls = [
-        "https://github.com/sgammon/rules_graalvm/releases/download/v0.11.1/rules_graalvm-0.11.1.zip",
+        "https://github.com/sgammon/rules_graalvm/releases/download/v0.11.2/rules_graalvm-0.11.2.zip",
     ],
 )
 ```
@@ -88,11 +88,11 @@ register_graalvm_toolchains()
 
 | Artifact                   | Integrity value                                       |
 | -------------------------- | ----------------------------------------------------- |
-| `rules_graalvm-0.11.1.zip` | `sha256-5PonWwYtzQOx7LArsl8B6tUSAjAGqHSl4MLLeLptjnM=` |
-| `rules_graalvm-0.11.1.tgz` | `sha256-ASi0qGZJdGifra5WtRfeYnxfQhQZJREbrwXckcN68cA=` |
+| `rules_graalvm-0.11.2.zip` | `sha256-I60JXLn7hNN9xH/32K6qCUu9L0R1pxlLc34/ei3rmdQ=` |
+| `rules_graalvm-0.11.2.tgz` | `sha256-T3xctDpaCMyflXukRIHbsv7+k+q8IuSyQFZFgIed6T8=` |
 
 ```starlark
-bazel_dep(name = "rules_graalvm", version = "0.11.1")
+bazel_dep(name = "rules_graalvm", version = "0.11.2")
 ```
 
 ```starlark

README.md

@@ -7,7 +7,7 @@
 
 ---
 
-> Latest release: `0.11.1`
+> Latest release: `0.11.2`
 
 > **Important**
 > Currently in beta. Feedback welcome but will probably break your build.
@@ -34,18 +34,18 @@ Use [GraalVM](https://graalvm.org) from [Bazel](https://bazel.build), with suppo
 
 **Via `WORKSPACE.bazel`:**
 
-| Artifact | SHA256 |
-| ------- | ----------- |
-| `rules_graalvm-0.11.1.zip` | `e4fa275b062dcd03b1ecb02bb25f01ead512023006a874a5e0c2cb78ba6d8e73` |
-| `rules_graalvm-0.11.1.tgz` | `0128b4a8664974689fadae56b517de627c5f42141925111baf05dc91c37af1c0` |
+| Artifact                   | SHA256                                                             |
+| -------------------------- | ------------------------------------------------------------------ |
+| `rules_graalvm-0.11.2.zip` | `23ad095cb9fb84d37dc47ff7d8aeaa094bbd2f4475a7194b737e3f7a2deb99d4` |
+| `rules_graalvm-0.11.2.tgz` | `4f7c5cb43a5a08cc9f957ba44481dbb2fefe93eabc22e4b240564580879de93f` |
 
 ```python
 http_archive(
     name = "rules_graalvm",
-    sha256 = "e4fa275b062dcd03b1ecb02bb25f01ead512023006a874a5e0c2cb78ba6d8e73",
-    strip_prefix = "rules_graalvm-0.11.1",
+    sha256 = "23ad095cb9fb84d37dc47ff7d8aeaa094bbd2f4475a7194b737e3f7a2deb99d4",
+    strip_prefix = "rules_graalvm-0.11.2",
     urls = [
-        "https://github.com/sgammon/rules_graalvm/releases/download/v0.11.1/rules_graalvm-0.11.1.zip",
+        "https://github.com/sgammon/rules_graalvm/releases/download/v0.11.2/rules_graalvm-0.11.2.zip",
     ],
 )
 ```
@@ -73,13 +73,13 @@ graalvm_repository(
 
 **Or, via `MODULE.bazel`:**
 
-| Artifact | Integrity value |
-| ------- | --------------- |
-| `rules_graalvm-0.11.1.zip` | `sha256-5PonWwYtzQOx7LArsl8B6tUSAjAGqHSl4MLLeLptjnM=` |
-| `rules_graalvm-0.11.1.tgz` | `sha256-ASi0qGZJdGifra5WtRfeYnxfQhQZJREbrwXckcN68cA=` |
+| Artifact                   | Integrity value                                       |
+| -------------------------- | ----------------------------------------------------- |
+| `rules_graalvm-0.11.2.zip` | `sha256-0NSg75R475U/xKElDxCPjTASDIUXm4KxF0thWlq8hUQ=` |
+| `rules_graalvm-0.11.2.tgz` | `sha256-hJq0EGTqHK15F8TpcoCOBDIpTC2dUXfmpwjIGN4t7Ds=` |
 
 ```python
-bazel_dep(name = "rules_graalvm", version = "0.11.1")
+bazel_dep(name = "rules_graalvm", version = "0.11.2")
 ```
 
 ```python