feat: release the package from the CI with trusted provider

Author: art049

.github/workflows/release.yml

@@ -0,0 +1,38 @@
+name: Release on tag
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  id-token: write
+  contents: write
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-python@v2
+        with:
+            python-version: "3.11"
+
+      - name: Install dependencies
+        run: pip install hatch
+
+      - name: Build the library
+        run: hatch build
+
+      - name: Publish package distributions to TestPyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+
+      - name: Create a draft release
+        run: |
+          NEW_VERSION=$(hatch project metadata | jq -r '.version')
+          gh release create v$NEW_VERSION --title "v$NEW_VERSION" --generate-notes -d
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

scripts/release.sh

@@ -15,6 +15,3 @@ git diff --exit-code
 git commit -am "Release v$NEW_VERSION 🚀"
 git tag v$NEW_VERSION -m "Release v$NEW_VERSION 🚀"
 git push --follow-tags
-hatch build
-hatch publish
-gh release create v$NEW_VERSION --title "v$NEW_VERSION" --generate-notes -d