fix: keep immutable index signature self-contained

Author: tnunamak

.github/workflows/publish-connector-release-index.yml

@@ -48,7 +48,6 @@ jobs:
           CONNECTOR_SOURCE_COMMIT: ${{ steps.meta.outputs.source_commit }}
           CONNECTOR_SOURCE_TAG: main
           CONNECTOR_RELEASE_TAG: ${{ steps.meta.outputs.immutable_release_tag }}
-          CONNECTOR_LATEST_RELEASE_TAG: ${{ steps.meta.outputs.latest_release_tag }}
           CONNECTOR_RELEASE_ID: ${{ steps.meta.outputs.release_id }}
           CONNECTOR_USE_RELEASE_ASSETS: "1"
           CONNECTOR_ENABLE_SIGSTORE_METADATA: "1"

scripts/generate-connector-index.mjs

@@ -55,15 +55,12 @@ function resolveReleaseMetadata(sourceCommit) {
   const releaseTag =
     process.env.CONNECTOR_RELEASE_TAG?.trim() ||
     `connectors-${sourceCommit.slice(0, 12)}`;
-  const latestReleaseTag =
-    process.env.CONNECTOR_LATEST_RELEASE_TAG?.trim() || "connectors-latest";
   const releaseId =
     process.env.CONNECTOR_RELEASE_ID?.trim() || releaseTag;
   const repo = process.env.GITHUB_REPOSITORY?.trim() || "vana-com/data-connectors";
 
   return {
     releaseTag,
-    latestReleaseTag,
     releaseId,
     repo,
   };
@@ -259,13 +256,7 @@ function main() {
     sourceRepo: "https://github.com/vana-com/data-connectors",
     generatedAt: registry.lastUpdated ?? new Date().toISOString(),
     signature: buildSigstoreBundleMetadata(
-      "connector-index.json.sigstore.json",
-      buildArtifactUrl({
-        artifactRelativePath: "connector-index.json.sigstore.json",
-        releaseTag: releaseMetadata.latestReleaseTag,
-        repo: releaseMetadata.repo,
-        sourceCommit,
-      })
+      "connector-index.json.sigstore.json"
     ),
     connectors: {},
   };