feat(astral-sh/ty): GitHub artifact attestations config

[scop]

• https://github.com/astral-sh/ty/attestations
• https://github.com/astral-sh/ty/releases/tag/0.0.24

Check List

• Read CONTRIBUTING.md
  • ⚠️ Avoid force push
  • ⚠️ Use argd s command when adding new packages
• Install and execute the package and confirm if the package works well

Summary by CodeRabbit

Release Notes

• Chores
  • Added configuration for ty package version 0.0.23 with platform-specific asset handling and artifact attestations.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: e941fcb1-b7a7-46cd-b072-151ae4e8af8f

📥 Commits

Reviewing files that changed from the base of the PR and between 2a2705d and 134ea3c.

📒 Files selected for processing (3)

• pkgs/astral-sh/ty/pkg.yaml
• pkgs/astral-sh/ty/registry.yaml
• registry.yaml

---

📝 Walkthrough

Walkthrough

Added package manifests and registry configurations for the ty package, including version constraints for v0.0.23 and earlier, platform-specific asset mappings, OS/architecture normalization rules, checksum verification via GitHub releases, and GitHub artifact attestations for release signing.

Changes

Cohort / File(s)	Summary
Package Manifest pkgs/astral-sh/ty/pkg.yaml	Added new astral-sh/ty package entry with explicit version 0.0.23, while retaining existing 0.0.24 entry.
Package-Specific Registry Config pkgs/astral-sh/ty/registry.yaml	Added version_overrides for ty versions ≤ 0.0.23 with platform-specific asset naming (ty-{{.Arch}}-{{.OS}}.{{.Format}}), file extraction mappings, OS/arch replacements (amd64↔x86_64, darwin↔apple-darwin, etc.), and tar.gz/zip format rules. Added github_artifact_attestations referencing astral-sh/ty/.github/workflows/release.yml for existing unbounded version constraint.
Global Registry Config registry.yaml	Mirrored package-specific registry changes: added version_overrides for ty with semver constraint, platform asset selection, checksum verification, and github_artifact_attestations entry.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

Possibly related PRs

• feat(block/goose): GitHub artifact attestations config #49418: Adds package-specific version_overrides and github_artifact_attestations entries using identical configuration patterns.
• feat(dprint/dprint): GitHub immutable release config #50074: Implements the same registry config pattern with semver-scoped asset/replacements/checksum blocks across different packages.
• feat(spinel-coop/rv): GitHub artifact attestations config #49919: Applies the same version_override and github_artifact_attestations configuration changes to other package registry YAMLs.

Suggested labels

enhancement

Poem

🐰 A package named ty hops into view,
With versions constrained and checksums true,
Attestations signed on GitHub's release,
Platform-specific binaries bring us peace,
Registry config blooms with care anew!

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description is largely incomplete, providing only reference links and an unchecked checklist without explaining the actual changes made or their purpose.	Add a substantive description explaining what GitHub artifact attestations are being added, why they're needed, and how the changes implement this (e.g., version constraints, checksum verification, affected files).

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and accurately summarizes the main change: adding GitHub artifact attestations configuration for the astral-sh/ty package.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Tip

CodeRabbit can generate a title for your PR based on the changes.

Add @coderabbitai placeholder anywhere in the title of your PR and CodeRabbit will replace it with a title based on the changes in the PR. You can change the placeholder by changing the reviews.auto_title_placeholder setting.

[suzuki-shunsuke]

Thank you!