CI: attest standalone build files. Bump devdeps.

Author: paulmillr

.github/workflows/release.yml

@@ -3,13 +3,14 @@ on:
   release:
     types: [created]
 jobs:
-  release-js:
-    name: 'jsbt v0.3.1' # Should match commit below
-    uses: paulmillr/jsbt/.github/workflows/release.yml@c45f03360e0171b138f04568d2fdd35d7bbc0d35
+  test-js:
+    name: 'jsbt v0.3.3' # Should match commit below
+    uses: paulmillr/jsbt/.github/workflows/release.yml@c9a9f2cd6b4841aa3117b174e9ea468b1650e5ea
     with:
       build-path: test/build
     secrets:
       NPM_PUBLISH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}
     permissions:
       contents: write
       id-token: write
+      attestations: write

.github/workflows/test-js.yml

@@ -4,5 +4,5 @@ on:
   - pull_request
 jobs:
   test-js:
-    name: 'jsbt v0.3.1' # Should match commit below
-    uses: paulmillr/jsbt/.github/workflows/test-js.yml@c45f03360e0171b138f04568d2fdd35d7bbc0d35
+    name: 'jsbt v0.3.3' # Should match commit below
+    uses: paulmillr/jsbt/.github/workflows/test-js.yml@c9a9f2cd6b4841aa3117b174e9ea468b1650e5ea

package-lock.json

@@ -21,10 +21,10 @@
     "@scure/base": "~1.2.2"
   },
   "devDependencies": {
-    "@paulmillr/jsbt": "0.3.1",
+    "@paulmillr/jsbt": "0.3.3",
     "micro-should": "0.5.1",
-    "prettier": "3.3.2",
-    "typescript": "5.5.2"
+    "prettier": "3.5.2",
+    "typescript": "5.8.2"
   },
   "sideEffects": false,
   "author": "Paul Miller (https://paulmillr.com)",