ci: Regenerate release.yml to match cargo-dist 0.31.0 output

[unclesp1d3r]

Summary

Restores .github/workflows/release.yml to cargo-dist 0.31.0's generated output, fixing the dist plan "out of date contents" failure that currently blocks the plan and dist-audit jobs on every PR.

Root cause

PR #337 (dependabot, actions/checkout v6.0.3 -> v7.0.0) edited release.yml and pinned checkout to v7.0.0 in all 6 jobs. But release.yml is auto-generated by cargo-dist, and 0.31.0 (pinned in dist-workspace.toml) generates actions/checkout@v6.0.2. So dist plan fails:

help: run 'dist init' to update the file
      ('allow-dirty' in Cargo.toml to ignore out of date contents)

Per AGENTS.md S12.3, release.yml is auto-generated and must not be hand-edited.

Fix

Ran dist generate (cargo-dist 0.31.0). Diff is exactly the 6 checkout@v7.0.0 -> @v6.0.2 reversions, nothing else.

Verification

• dist plan -> exit 0
• diff contains only the 6 checkout-pin lines

Follow-up (not in this PR)

To stop dependabot from re-breaking release.yml, consider adding it to a dependabot ignore path or bumping cargo-dist to a release that pins checkout v7. Flagging for a maintainer decision.

Test plan

• dist plan exits 0 locally
• CI plan / audit jobs green on this PR

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

• .github/workflows/release.yml is excluded by !.github/workflows/release.yml and included by .github/**

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: 1fe23986-924b-455b-9a0f-1a033f6849c0

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[mergify]

Merge Protections

🔴 1 of 4 protections blocking

	Protection	Waiting on
🔴	🚦 Auto-queue	—
🟢	Enforce conventional commit	—
🟢	Full CI must pass	—
🟢	Do not merge outdated PRs	—

🔴 🚦 Auto-queue

This rule is failing.

When all merge protections are satisfied and these conditions match, this pull request will be queued automatically.

• any of:
  • all of:
    • author = dosubot[bot]
    • base = main
    • label != do-not-merge
  • all of:
    • author = dependabot[bot]
    • base = main
    • label != do-not-merge
  • all of:
    • author = release-plz[bot]
    • head ~= ^release-plz-
    • base = main
    • label != do-not-merge

---

Show 3 satisfied protections

🟢 Enforce conventional commit

Require conventional commit format per https://www.conventionalcommits.org/en/v1.0.0/. Skipped for bots.

• title ~= ^(fix|feat|docs|style|refactor|perf|test|build|ci|chore|revert)(?:\(.+\))?!?:

🟢 Full CI must pass

All CI checks must pass. Release-plz PRs are exempt because they only bump versions and changelogs (code was already tested on main), and GITHUB_TOKEN-triggered force-pushes suppress CI.

• check-success = coverage
• check-success = quality
• check-success = test
• check-success = test-cross-platform (macos-latest, macOS)
• check-success = test-cross-platform (ubuntu-22.04, Linux)
• check-success = test-cross-platform (ubuntu-latest, Linux)
• check-success = test-cross-platform (windows-latest, Windows)

🟢 Do not merge outdated PRs

Make sure PRs are within 10 commits of the base branch before merging

• #commits-behind <= 10

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request