name: Release
on:
push:
branches:
- main
concurrency: ${{ github.workflow }}-${{ github.ref }}
permissions:
contents: read
id-token: write
jobs:
release:
name: Version
runs-on: ubuntu-latest
steps:
- name: Secure runner
uses: tempoxyz/gh-actions/actions/secure-runner@55fe3b63d9612623cc51e6c62d9d62fbcb175fb0 - name: Fetch GitHub token via STS
id: app-token
uses: tempoxyz/gh-actions/actions/github-sts@55fe3b63d9612623cc51e6c62d9d62fbcb175fb0 with:
policy: release-pr
- name: Checkout
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with:
token: ${{ steps.app-token.outputs.token }}
- name: Authenticate with crates.io
uses: tempoxyz/gh-actions/vendor/rust-lang/crates-io-auth-action@55fe3b63d9612623cc51e6c62d9d62fbcb175fb0 id: auth
- name: Changelogs
uses: tempoxyz/changelogs@83e69646d7ef76c5f35364d3a06fce3a6fe62bf9 with:
ecosystem: rust
conventional-commit: true
crate-token: ${{ steps.auth.outputs.token }}
github-token: ${{ steps.app-token.outputs.token }}