zed/tooling
Finn Evers 98f94e2064
ci: Verify commits and releases created with Zed Zippy (#54264)
This changes our approach for creating Zed version bumps with the Zed
Zippy identity:

With these changes, the Zippy version bumps as well as the tag creations
will be verified as per
https://docs.github.com/en/authentication/managing-commit-signature-verification/about-commit-signature-verification#signature-verification-for-bots.
This adds an extra layer of security for version bumps and release
triggers done by the Zippy identity.

Eventually, we can move code more around for this so it happens in the
bot itself, but for now, I think its a good and solid interim solution
to have this here.

Release Notes:

- N/A
2026-04-20 18:54:12 +02:00
..
compliance compliance: Remove irrelevant case (#53936) 2026-04-15 10:46:53 +02:00
perf perf: Fixup Hyperfine finding (#41837) 2025-11-03 17:36:33 +00:00
xtask ci: Verify commits and releases created with Zed Zippy (#54264) 2026-04-20 18:54:12 +02:00