chore(release): bump packslip action to v1.0.0

[jdx]

Summary

• Bumps the pinned jdx/packslip action from v0.3.0 to v1.0.0.
• v1.0.0 declares the manifest format stable, fixes the packslip.dev/releases/v1 predicate URL that previously 404d, and requires every artifact to declare a format (already satisfied here — every artifact is an archive, which infers its format from the file name).

Test plan

• Next tagged release runs the packslip step successfully and uploads packslip.sigstore.json

🤖 Generated with Claude Code

---

Note

Low Risk
Single pinned GitHub Action version in CI with no application or auth logic changes; verify the next tag run uploads packslip.sigstore.json as expected.

Overview
Updates the publish-cli workflow’s packslip job to pin jdx/packslip from v0.3.0 to v1.0.1 (new commit SHA). Inputs (artifacts, bin, resources) are unchanged.

This is a release-pipeline-only change: tagged releases still generate the signed packslip manifest over the same CLI archives and uploaded usage.usage.kdl asset.

^{Reviewed by Cursor Bugbot for commit 2d1cc71. Bugbot is set up for automated code reviews on this repo. Configure here.}

Summary by CodeRabbit

• Chores
  • Updated the package publishing workflow to use the newer pinned Packslip action version.

AI-assisted — Tool: Claude Code; model: anthropic/claude-sonnet-5; version: unavailable.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Team

Run ID: e9f345ff-05a3-4739-8c6b-02e62b35d192

📥 Commits

Reviewing files that changed from the base of the PR and between c2c9cb3 and 2d1cc71.

📒 Files selected for processing (1)

• .github/workflows/publish-cli.yml

Included review availability: Your plan provides up to 4 included reviews per hour; 3 remain after this review.

---

📝 Walkthrough

Walkthrough

The publishing workflow updates the pinned Packslip GitHub Action from v1.0.0 to v1.0.1.

Changes

Packslip publishing

Layer / File(s)	Summary
Update Packslip action .github/workflows/publish-cli.yml	The Packslip publishing step now uses the pinned v1.0.1 action commit instead of the v1.0.0 commit.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 2d1cc

The CLI publishing workflow now uses Packslip v1.0.1. No concrete merge-blocking risk remains for release artifact signing and upload behavior.

Poem

A rabbit checks the workflow line
Packslip now advances one version in time
Pinned tight to v1.0.1
The publishing job knows what to do
Carrots nod beside the queue

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title identifies the main change: updating the jdx/packslip action. However, it states v1.0.0 while the change updates the action to v1.0.1.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Instruction counts

benchmark	trend	instructions	Δ	wall (min)	Δ
markdown	▁▁▁████	386,438,143 → 386,438,693	+0.00%	64.25 → 64.64ms	+0.61%
startup	▁▁▁▇▇▃█	952,527 → 959,539	+0.74%	1.17 → 1.18ms	+0.89%

No instruction-count regression above 1%.

_{Only instruction counts gate. Wall clock is shown for context — on identical hardware it moves 4-20% run to run.}

_{Measured by tak — instruction-counted CLI benchmarks, stored in this repository's git notes.}

Shadow comparison

Parsing mise use -g node@20 against a shadow of mise's committed spec.
Reported, not gated: the shadow grows as the derive learns to express more, so
what to watch is the ratio rather than either column.

framework	stripped binary, bytes
usage	1344744
bpaf	2493216
clap	3101656

framework	instructions, cold parse	vs usage
usage	8374	—
clap	6314655	754x
bpaf	21909025	2616x

                                              min       p01       p10    median
usage-rs: argv -> struct                     1149      1175      1187      1193  ns
clap: build tree + parse -> struct        1792814   1795914   1800754   1811533  ns
bpaf: build parser + parse -> struct      5626412   5626412   5643131   5686764  ns

usage: argv -> struct                            1171 ns      1.17 µs
clap: build tree + parse -> struct            1817795 ns   1817.80 µs
clap: parse -> struct, tree reused              72892 ns     72.89 µs
clap: build tree only                         1046682 ns   1046.68 µs

_{2d1cc7197015 vs 165a110e16fd · measured on the runner, not pushed to the history.}