Fix the kpt release job

[liamfallon]

The release jobs are failing on the kpt repo because the working-directory is not set on the "Generate SLSA subjects for provenance" step in the job.

This PR fixes that.

[netlify]

✅ Deploy Preview for kptdocs ready!

Name	Link
🔨 Latest commit	c8cea02
🔍 Latest deploy log	https://app.netlify.com/projects/kptdocs/deploys/698ccf945c2e6d00084c93b2
😎 Deploy Preview	https://deploy-preview-4385--kptdocs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[Copilot]

Pull request overview

Fixes the failing kpt release workflow by ensuring the “Generate SLSA subjects for provenance” step runs from the correct repository subdirectory (matching where dist/ artifacts are produced).

Changes:

• Set working-directory for the “Generate SLSA subjects for provenance” step to go/src/github.com/kptdev/kpt.

Comments suppressed due to low confidence (1)

.github/workflows/release.yml:73

• The step still uses the deprecated ::set-output command (later in this run: block) to publish hashes. GitHub recommends writing to $GITHUB_OUTPUT instead to avoid deprecation warnings and potential future breakage.

        working-directory: go/src/github.com/kptdev/kpt
        run: |
          set -euo pipefail

          checksum_file=$(cat dist/artifacts.json | jq -r '.[] | select (.type=="Checksum") | .path')

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.