fix: don't use wildcards for in-workspace deps (#832)

Author: woodruffw

.github/workflows/release-binaries.yml

@@ -91,7 +91,7 @@ jobs:
 
       - name: Upload to release
         run: |
-          gh release upload "${GITHUB_REF_NAME}"
+          gh release upload "${GITHUB_REF_NAME}" distrib/*
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         shell: bash

Cargo.lock

@@ -16,8 +16,8 @@ license = "MIT"
 
 [workspace.dependencies]
 anyhow = "1.0.98"
-github-actions-expressions = { path = "crates/github-actions-expressions", version = "*" }
-github-actions-models = { path = "crates/github-actions-models", version = "*" }
+github-actions-expressions = { path = "crates/github-actions-expressions", version = "0.0.3" }
+github-actions-models = { path = "crates/github-actions-models", version = "0.28.3" }
 itertools = "0.14.0"
 pest = "2.8.0"
 pest_derive = "2.8.0"
@@ -58,7 +58,7 @@ tracing-subscriber = "0.3.19"
 tree-sitter = "0.25.4"
 tree-sitter-bash = "0.23.3"
 tree-sitter-powershell = "0.25.2"
-yamlpath = { path = "crates/yamlpath", version = "*" }
+yamlpath = { path = "crates/yamlpath", version = "0.18.0" }
 tree-sitter-yaml = "0.7.0"
 
 

Cargo.toml

@@ -1,7 +1,7 @@
 [package]
 name = "zizmor"
 description = "Static analysis for GitHub Actions"
-version = "1.8.0-rc0"
+version = "1.8.0-rc1"
 repository = "https://github.com/zizmorcore/zizmor"
 documentation = "https://docs.zizmor.sh"
 keywords = ["cli", "github-actions", "static-analysis", "security"]