add GHA job for publishing GitHub releases

Author: ndonkoHenri

.github/workflows/release.yml

@@ -11,7 +11,7 @@ on:
 
 permissions:
   id-token: write
-  contents: read
+  contents: write
 
 jobs:
   build:
@@ -67,8 +67,34 @@ jobs:
 
       - name: Publish Python package
         if: >
-          github.event_name != 'pull_request' && (
-            startsWith(github.ref, 'refs/tags/') ||
-            (github.ref == 'refs/heads/main' && steps.changes.outputs.publish == 'true')
-          )
+          startsWith(github.ref, 'refs/tags/')
+          || (github.event_name != 'pull_request' &&
+          github.ref == 'refs/heads/main' &&
+          steps.changes.outputs.publish == 'true')
         run: uv publish
+
+  release:
+    name: Publish GitHub Release
+    runs-on: ubuntu-latest
+    needs: build
+    if: startsWith(github.ref, 'refs/tags/')
+
+    steps:
+      - name: Download artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist
+
+      - name: Create/Update GitHub Release
+        uses: softprops/action-gh-release@v2
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          name: ${{ github.ref_name }}
+          tag_name: ${{ github.ref_name }}
+          files: dist/*.whl
+          generate_release_notes: true
+          preserve_order: true
+          overwrite_files: true
+          fail_on_unmatched_files: true