Merge branch 'main' into PFM-4030-gate

Signed-off-by: Jose I. Paris <jiparis@chainloop.dev>

Author: jiparis

.chainloop.yml

@@ -1,6 +1,6 @@
 # This indicates the [current version]+next
 # to indicate that we are building a new version of the project
-projectVersion: v1.62.1+next
+projectVersion: v1.63.0+next
 
 # Experimental feature used by Chainloop labs shared workflow https://github.com/chainloop-dev/labs
 # It maps the material names with location in disk so they get automatically attested

app/cli/pkg/action/attestation_init_test.go

@@ -252,9 +252,9 @@ func TestParseContractV2(t *testing.T) {
 				assert.Greater(t, len(spec.GetEnvAllowList()), 0, "Should have env allow list")
 				assert.NotNil(t, spec.GetRunner(), "Should have runner config")
 
-				// Verify annotations in metadata
-				annotations := result.GetMetadata().GetAnnotations()
-				assert.NotEmpty(t, annotations, "Should have metadata annotations")
+				// Verify annotations in spec
+				annotations := spec.GetAnnotations()
+				assert.NotEmpty(t, annotations, "Should have annotations")
 			} else {
 				assert.Nil(t, result, "Expected V2 schema parsing to fail")
 			}

app/cli/pkg/action/testdata/contract_v2.yaml

@@ -3,10 +3,12 @@ kind: Contract
 metadata:
   name: test-contract-v2
   description: Test contract in V2 format
-  annotations:
-    version: "1.0.0"
-    team: test-team
 spec:
+  annotations:
+    - name: version
+      value: "1.0.0"
+    - name: team
+      value: test-team
   materials:
     - type: CONTAINER_IMAGE
       name: skynet-control-plane