minor: Update CI.yml to use zig

.github/workflows/CI.yml

@@ -1,15 +1,15 @@
-# This file is autogenerated by maturin v1.6.0
+# This file is autogenerated by maturin v1.7.4
 # To update, run
 #
-#    maturin generate-ci github
+#    maturin generate-ci --zig github
 #
 name: CI
 
 on:
   push:
-  #   branches:
-  #     - main
-  #     - master
+    # branches:
+    #   - main
+    #   - master
     tags:
       - '*'
   pull_request:
@@ -32,6 +32,8 @@ jobs:
             target: aarch64
           - runner: ubuntu-latest
             target: armv7
+          - runner: ubuntu-latest
+            target: s390x
           - runner: ubuntu-latest
             target: ppc64le
     steps:
@@ -43,7 +45,7 @@ jobs:
         uses: PyO3/maturin-action@v1
         with:
           target: ${{ matrix.platform.target }}
-          args: --release --out dist --find-interpreter
+          args: --release --out dist --find-interpreter --zig
           sccache: 'true'
           manylinux: auto
       - name: Upload wheels
@@ -154,14 +156,26 @@ jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
-    # if: "startsWith(github.ref, 'refs/tags/')"
+    if: ${{ startsWith(github.ref, 'refs/tags/') || github.event_name == 'workflow_dispatch' }}
     needs: [linux, musllinux, windows, macos, sdist]
     permissions:
+      # Use to sign the release artifacts
       id-token: write
+      # Used to upload release artifacts
+      contents: write
+      # Used to generate artifact attestation
+      attestations: write
     steps:
       - uses: actions/download-artifact@v4
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: 'wheels-*/*'
       - name: Publish to PyPI
+        if: "startsWith(github.ref, 'refs/tags/')"
         uses: PyO3/maturin-action@v1
+        env:
+          MATURIN_PYPI_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
         with:
           command: upload
           args: --non-interactive --skip-existing wheels-*/*