ci: misc fixes

.github/workflows/release.yml

@@ -16,15 +16,14 @@ jobs:
       name: release
       url: https://pypi.org/project/stringenum/
     permissions:
-      id-token: write
-      contents: write
-      attestations: write
+      id-token: write # https://docs.pypi.org/trusted-publishers/using-a-publisher/#github-actions
+      contents: write # Required for creating a release
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
         with:
-          fetch-depth: 0 # Important for changelog
+          fetch-depth: 0 # Required for changelog
 
       - uses: actions/setup-python@v5
         with:
@@ -35,13 +34,10 @@ jobs:
         uses: astral-sh/setup-uv@v4
 
       - name: Build
-        run: |
-          uv build
-          rm dist/.gitignore
+        run: uv build
 
-      - uses: actions/attest-build-provenance@v1
-        with:
-          subject-path: "dist/*"
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
 
       - name: Generate changelog with git-cliff
         uses: tj-actions/git-cliff@v1
@@ -53,11 +49,7 @@ jobs:
       - name: Create Release
         uses: ncipollo/release-action@v1
         with:
-          artifacts: "dist/*"
           token: ${{ secrets.GITHUB_TOKEN }}
           bodyFile: "CHANGELOG.md"
           draft: false
           prerelease: false
-
-      - name: Publish package distributions to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1

.github/workflows/tests.yml

@@ -20,10 +20,6 @@ on:
   workflow_dispatch:
   workflow_call:
 
-defaults:
-  run:
-    shell: bash
-
 env:
   FORCE_COLOR: 1
 
@@ -52,7 +48,7 @@ jobs:
         id: setup-uv
         uses: astral-sh/setup-uv@v4
 
-      - name: Run tests and generate coverage
+      - name: Run nox
         run: uv run nox
 
       - name: Build