thoughtjack 0.6.0

Adversarial agent security testing tool
Documentation
name: Release-plz

on:
  push:
    branches: [main]

permissions: read-all

jobs:
  release-pr:
    name: Release PR
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          fetch-depth: 0
          token: ${{ secrets.RELEASE_PLZ_TOKEN }}

      - uses: dtolnay/rust-toolchain@4be9e76fd7c4901c61fb841f559994984270fce7 # stable

      - name: Run release-plz
        uses: release-plz/action@52440b50d383aa252927de395c8b2c1e0a9cf8e9 # v0.5
        with:
          command: release-pr
        env:
          GITHUB_TOKEN: ${{ secrets.RELEASE_PLZ_TOKEN }}

  # NOTE: The `release` job was removed to prevent automatic crates.io
  # publishing on every push to main. Publishing is now manual:
  #   1. Merge PR → review release-plz PR for changelog
  #   2. git tag vX.Y.Z && git push origin vX.Y.Z
  #   3. cargo-dist (release.yml) builds binaries + creates GitHub Release
  #   4. cargo publish (manual)