globset-0.4.20
cargo: add new build-time `unstable-index` feature
ci: attest build provenance for release archives