ci: use separate path

.github/workflows/release.yml

@@ -11,7 +11,7 @@ permissions:
 
 jobs:
   publish:
-    name: publish python library
+    name: publish artifacts
     timeout-minutes: 60
     runs-on: ledgerhq-shared-small
     steps:
@@ -44,18 +44,30 @@ jobs:
         timeout-minutes: 10
         run: pdm exe
 
-      - name: Generate build attestations
+      - name: Generate library build attestations
         timeout-minutes: 10
         uses: LedgerHQ/actions-security/actions/attest@actions/attest-1
         with:
           subject-path: dist/*
 
-      - name: Sign distribution artifacts
+      - name: Generate application build attestations
+        timeout-minutes: 10
+        uses: LedgerHQ/actions-security/actions/attest@actions/attest-1
+        with:
+          subject-path: build/exe/*
+
+      - name: Sign library artifacts
         timeout-minutes: 10
         uses: LedgerHQ/actions-security/actions/sign-blob@actions/sign-blob-1
         with:
           path: dist
 
+      - name: Sign application artifacts
+        timeout-minutes: 10
+        uses: LedgerHQ/actions-security/actions/sign-blob@actions/sign-blob-1
+        with:
+          path: build/exe
+
       - name: Upload library artifacts to Ledger Artifactory repository
         timeout-minutes: 10
         env:
@@ -70,6 +82,6 @@ jobs:
         with:
           repo_token: ${{ secrets.GITHUB_TOKEN }}
           tag: ${{ github.ref }}
-          file: dist/erc7730
+          file: build/exe/erc7730
           asset_name: erc7730
           overwrite: true

.pre-commit-config.yaml

@@ -8,7 +8,7 @@ repos:
         name: sync pre-commit dependencies
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.6.6
+    rev: v0.6.7
     hooks:
       - id: ruff
         name: lint code (ruff)
@@ -33,7 +33,7 @@ repos:
           - pytest==8.3.3
 
   - repo: https://github.com/pdm-project/pdm
-    rev: 2.17.3
+    rev: 2.18.2
     hooks:
       - id: pdm-lock-check
         name: check pdm lock file

pyproject.toml

@@ -50,7 +50,7 @@ test.shell = "pytest tests"
 all.help = "Run lint+test"
 all.shell = { composite = ["lint", "test"] }
 exe.help = "Package the application into a standalone executable"
-exe.shell = "pdm pack --compress --exe --interpreter '/usr/bin/env python3' --output dist/erc7730"
+exe.shell = "pdm pack --compress --exe --interpreter '/usr/bin/env python3' --output build/exe/erc7730"
 
 [tool.pdm]
 plugins = ["sync-pre-commit-lock", "pdm-packer"]