diff --git a/.github/workflows/auto_merge_prs.yml b/.github/workflows/auto_merge_prs.yml
index a4f334c7a..c2e5e9819 100644
--- a/.github/workflows/auto_merge_prs.yml
+++ b/.github/workflows/auto_merge_prs.yml
@@ -8,7 +8,9 @@ permissions:
 jobs:
   auto-merge:
     runs-on: ubuntu-latest
-    if: ${{ github.actor == 'dependabot[bot]' || github.actor == 'github-actions' }}
+    if: |
+      ${{ github.actor == 'dependabot[bot]' || github.actor == 'github-actions' || ( github.actor == 'Pr0methean' 
+      && github.event.pull_request.head.repo.full_name == github.event.pull_request.base.repo.full_name )}}
     steps:
       - name: Dependabot metadata
         id: metadata
diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml
index 529198600..3e23254fe 100644
--- a/.github/workflows/release-plz.yml
+++ b/.github/workflows/release-plz.yml
@@ -6,6 +6,8 @@ on:
 permissions:
   pull-requests: write
   contents: write
+  id-token: write
+  attestations: write
 jobs:
   release-plz:
     name: Release-plz
@@ -25,4 +27,7 @@ jobs:
         uses: MarcoIeni/release-plz-action@v0.5
         env:
           GITHUB_TOKEN: ${{ secrets.RELEASE_PLZ_PAT }}
-          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
\ No newline at end of file
+          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
+      - uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: target/release/libzip.rlib
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 64d914b02..b3585452e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,39 @@
 # Changelog
 
+## [1.3.0](https://github.com/zip-rs/zip2/compare/v1.2.3...v1.3.0) - 2024-05-17
+
+### <!-- 0 -->🚀 Features
+- Add `is_symlink` method
+
+### <!-- 1 -->🐛 Bug Fixes
+- Extract symlinks into symlinks on Unix and Windows, and fix a bug that affected making directories writable on MacOS
+
+### <!-- 2 -->🚜 Refactor
+- Eliminate deprecation warning when `--all-features` implicitly enables the deprecated feature
+- Check if archive contains a symlink's target, without borrowing both at the same time
+- Eliminate a clone that's no longer necessary
+- is_dir only needs to look at the filename
+- Remove unnecessary #[cfg] attributes
+
+### <!-- 7 -->⚙️ Miscellaneous Tasks
+- Fix borrow-of-moved-value
+- Box<str> doesn't directly convert to PathBuf, so convert back to String first
+- partial revert - only &str has chars(), but Box<str> should auto-deref
+- contains_key needs a `Box<str>`, so generify `is_dir` to accept one
+- Add missing `ZipFileData::is_dir()` method
+- Fix another Windows-specific error
+- More bug fixes for Windows-specific symlink code
+- More bug fixes for Windows-specific symlink code
+- Bug fix: variable name change
+- Bug fix: need both internal and output path to determine whether to symlink_dir
+- Another bug fix
+- Fix another error-type conversion error
+- Fix error-type conversion on Windows
+- Fix conditionally-unused import
+- Fix continued issues, and factor out the Vec<u8>-to-OsString conversion (cc: [#125](https://github.com/zip-rs/zip2/pull/125))
+- Fix CI failure involving conversion to OsString for symlinks (see my comments on [#125](https://github.com/zip-rs/zip2/pull/125))
+- Move path join into platform-independent code
+
 ## [1.2.3](https://github.com/zip-rs/zip2/compare/v1.2.2...v1.2.3) - 2024-05-10
 
 ### <!-- 1 -->🐛 Bug Fixes
diff --git a/Cargo.toml b/Cargo.toml
index c7cdbee16..a78ad8345 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "zip"
-version = "1.2.3"
+version = "1.3.0"
 authors = [
     "Mathijs van de Nes <git@mathijs.vd-nes.nl>",
     "Marli Frost <marli@frost.red>",