Conversation
Greptile SummaryThis is an automated release PR generated by release-plz, bumping Confidence Score: 5/5Safe to merge — only a version bump and changelog update with no logic changes. All findings are P2 style issues (duplicate changelog section header); no correctness, security, or data-integrity concerns are present. No files require special attention. Important Files Changed
Flowchart%%{init: {'theme': 'neutral'}}%%
flowchart TD
A[release-plz bot] -->|generates PR| B[chore: release v0.2.6]
B --> C[Cargo.toml\nversion 0.2.5 → 0.2.6]
B --> D[CHANGELOG.md\nadd v0.2.6 entry]
C --> E[Publish to crates.io]
D --> E
Reviews (1): Last reviewed commit: "chore: release v0.2.6" | Re-trigger Greptile |
| ### Added | ||
|
|
||
| - support custom GitHub API base URL for `GitHubSource` and `verify_github_attestation`, enabling verification against GitHub Enterprise Server instances |
There was a problem hiding this comment.
### Added section header
The 0.2.6 entry contains two consecutive ### Added headings (lines 12 and 16). The second block repeats the same subject with a longer description. This appears to be a release-plz generation artifact — consider consolidating into a single ### Added section or removing the redundant header before the extended description.
| ### Added | |
| - support custom GitHub API base URL for `GitHubSource` and `verify_github_attestation`, enabling verification against GitHub Enterprise Server instances | |
| - support custom GitHub API base URL ([#45](https://github.com/jdx/sigstore-verification/pull/45)) — support custom GitHub API base URL for `GitHubSource` and `verify_github_attestation`, enabling verification against GitHub Enterprise Server instances |
There was a problem hiding this comment.
Code Review
This pull request updates the project version to 0.2.6 and adds a corresponding entry to the changelog. Feedback was provided regarding a duplicate 'Added' section in the CHANGELOG.md, which should be consolidated to maintain a clean history.
| ### Added | ||
|
|
||
| - support custom GitHub API base URL ([#45](https://github.com/jdx/sigstore-verification/pull/45)) | ||
|
|
There was a problem hiding this comment.
The changelog contains duplicate ### Added sections for the same feature. This block is redundant as the feature is already described in more detail in the subsequent section (lines 16-18). It is recommended to remove this redundant block and manually append the PR reference ([#45](https://github.com/jdx/sigstore-verification/pull/45)) to the existing entry below.
🤖 New release
sigstore-verification: 0.2.5 -> 0.2.6 (✓ API compatible changes)Changelog
This PR was generated with release-plz.
Note
Low Risk
Low risk: this PR only bumps the crate version and updates the changelog; no functional code changes are included.
Overview
Bumps
sigstore-verificationfrom0.2.5to0.2.6and adds a0.2.6entry toCHANGELOG.mddocumenting support for a custom GitHub API base URL (including GitHub Enterprise Server use cases).Reviewed by Cursor Bugbot for commit c5cd203. Bugbot is set up for automated code reviews on this repo. Configure here.