add obsidian eslint plugin, solve major issues

.github/workflows/release.yml

@@ -13,9 +13,14 @@ jobs:
     build:
         runs-on: ubuntu-latest
 
+        permissions:
+            contents: write
+            id-token: write
+            attestations: write
+
         steps:
             - name: Checkout
-              uses: actions/checkout@v4
+              uses: actions/checkout@v6
 
             - name: Determine prerelease status
               id: status
@@ -27,23 +32,32 @@ jobs:
                   fi
 
             - name: Install Bun
-              uses: oven-sh/setup-bun@v1
+              uses: oven-sh/setup-bun@v2
               with:
                   bun-version: latest
 
             - name: Build
               id: build
               run: |
-                  bun install
+                  bun install --frozen-lockfile
                   bun run build
                   mkdir ${{ env.PLUGIN_NAME }}
                   cp dist/main.js dist/manifest.json dist/styles.css ${{ env.PLUGIN_NAME }}
                   zip -r ${{ env.PLUGIN_NAME }}-${{ github.ref_name }}.zip ${{ env.PLUGIN_NAME }}
                   ls
 
+            - name: Attest build provenance
+              uses: actions/attest@v4
+              with:
+                  subject-path: |
+                      dist/main.js
+                      dist/manifest.json
+                      dist/styles.css
+                      ${{ env.PLUGIN_NAME }}-${{ github.ref_name }}.zip
+
             - name: Release
               id: release
-              uses: softprops/action-gh-release@v2
+              uses: softprops/action-gh-release@v3
               with:
                   prerelease: ${{ steps.status.outputs.prerelease }}
                   token: ${{ secrets.GITHUB_TOKEN }}