feat: gh releases

.github/workflows/build.yaml

@@ -11,7 +11,7 @@ on:
         -   main
 
 permissions:
-    contents: read
+    contents: write
 
 concurrency:
     group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
@@ -148,3 +148,21 @@ jobs:
                 path: ./dist
         -   name: Publish package
             uses: pypa/gh-action-pypi-publish@release/v1
+
+    gh-release:
+        needs: [sdist, wheel]
+        runs-on: ubuntu-latest
+        if: startsWith(github.ref, 'refs/tags/')
+        steps:
+        -   name: Download all workflow run artifacts
+            uses: actions/download-artifact@v3
+            with:
+                path: ./dist
+        -   name: Release
+            uses: softprops/action-gh-release@v1
+            if: startsWith(github.ref, 'refs/tags/')
+            with:
+                generate_release_notes: true
+                fail_on_unmatched_files: true
+                files: |
+                    ./dist/*

.github/workflows/changelog.yaml

@@ -5,6 +5,9 @@ on:
         branches:
         -   main
 
+permissions:
+    contents: write
+
 jobs:
     changelog:
         name: Generate changelog
@@ -28,4 +31,4 @@ jobs:
                 set +e
                 git add CHANGELOG.md
                 git commit -m "chore: update changelog [ci skip]"
-                git push https://${{ secrets.GH_TOKEN }}@github.com/joshua-auchincloss/hatch-cython.git main
+                git push https://${{ secrets.GITHUB_TOKEN }}@github.com/joshua-auchincloss/hatch-cython.git main