ci: update workflows

Author: ObserverOfTime

.github/dependabot.yml

@@ -0,0 +1,27 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+      day: sunday
+    commit-message:
+      prefix: ci
+    labels: [dependencies]
+    open-pull-requests-limit: 1
+    groups:
+      actions:
+        patterns: ["*"]
+
+  - package-ecosystem: gitsubmodule
+    directory: /
+    schedule:
+      interval: monthly
+      day: friday
+    commit-message:
+      prefix: build
+    labels: [dependencies]
+    open-pull-requests-limit: 1
+    groups:
+      submodules:
+        patterns: ["*"]

.github/workflows/ci.yml

@@ -8,14 +8,14 @@ on:
       - src/**
       - test/**
       - bindings/**
-      - binding.gyp
+      - tree-sitter.json
   pull_request:
     paths:
       - grammar.js
       - src/**
       - test/**
       - bindings/**
-      - binding.gyp
+      - tree-sitter.json
 
 concurrency:
   group: ${{github.workflow}}-${{github.ref}}
@@ -28,16 +28,18 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ubuntu-latest, windows-latest, macos-14]
+        os: [ubuntu-latest, windows-latest, macos-latest]
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
         with:
           submodules: true
       - name: Set up tree-sitter
-        uses: tree-sitter/setup-action/cli@v1
+        uses: tree-sitter/setup-action/cli@v2
       - name: Run parser and binding tests
         uses: tree-sitter/parser-test-action@v2
+        with:
+          generate: false
       - name: Parse sample files
         uses: tree-sitter/parse-action@v4
         id: parse-files

.github/workflows/publish.yml

@@ -7,8 +7,12 @@ on:
 jobs:
   release:
     uses: tree-sitter/workflows/.github/workflows/release.yml@main
+    with:
+      attestations: true
     permissions:
       contents: write
+      id-token: write
+      attestations: write
   npm:
     uses: tree-sitter/workflows/.github/workflows/package-npm.yml@main
     secrets:
@@ -17,3 +21,7 @@ jobs:
     uses: tree-sitter/workflows/.github/workflows/package-crates.yml@main
     secrets:
       CARGO_REGISTRY_TOKEN: ${{secrets.CARGO_TOKEN}}
+  pypi:
+    uses: tree-sitter/workflows/.github/workflows/package-pypi.yml@main
+    secrets:
+      PYPI_API_TOKEN: ${{secrets.PYPI_TOKEN}}

README.md

@@ -5,6 +5,7 @@
 [![matrix][matrix]](https://matrix.to/#/#tree-sitter-chat:matrix.org)
 [![npm][npm]](https://www.npmjs.com/package/tree-sitter-gitattributes)
 [![crates][crates]](https://crates.io/crates/tree-sitter-gitattributes)
+[![pypi][pypi]](https://pypi.org/project/tree-sitter-gitattributes/)
 
 A tree-sitter parser for `.gitattributes` files.
 
@@ -29,3 +30,4 @@ A tree-sitter parser for `.gitattributes` files.
 [matrix]: https://img.shields.io/matrix/tree-sitter-chat%3Amatrix.org?logo=matrix&label=matrix
 [npm]: https://img.shields.io/npm/v/tree-sitter-gitattributes?logo=npm
 [crates]: https://img.shields.io/crates/v/tree-sitter-gitattributes?logo=rust
+[pypi]: https://img.shields.io/pypi/v/tree-sitter-gitattributes?logo=pypi&logoColor=ffd242