[chore] tag releases automatically

Author: mdaniels5757

.github/workflows/publish.yml

@@ -1,6 +1,14 @@
 name: publish
 
-on: [push, workflow_dispatch]
+# Note: this workflow evaluates Python code from this repository.
+# It therefore must not be run on untrusted input (e.g. on pull requests).
+# But that's fine, because we only want to publish when the default branch
+# is pushed to (or when a maintainer manually runs this workflow) anyways.
+on: 
+  push:
+    branches:
+      - with-action
+  workflow_dispatch:
 
 jobs:
   diff:
@@ -25,6 +33,7 @@ jobs:
     environment: release
     if: needs.diff.outputs.CHANGED == 'true'
     permissions:
+      contents: write
       id-token: write
     steps:
       - uses: actions/checkout@v4
@@ -37,5 +46,20 @@ jobs:
           python src/overrides.py 3.6
           uv build
       - name: Publish to PyPI
-        continue-on-error: true
+        if: env.GITHUB_REPOSITORY == 'promplate/partial-json-parser'
         run: uv publish
+      - name: Read version number
+        id: read-version
+        run: |
+          cd src/partial_json_parser
+          VERSION="$(python -c 'from version import __version__; print(__version__)')"
+          echo "VERSION=$VERSION" >> $GITHUB_OUTPUT
+      - name: Publish GitHub release
+        env:
+          GH_TOKEN: ${{ github.token }}
+          VERSION: ${{ steps.read-version.outputs.VERSION }}
+        run: |
+          gh release create "v$VERSION" \
+            --repo="$GITHUB_REPOSITORY" \
+                --title="${VERSION#v}" \
+                --generate-notes