release-plz.yml

name: release-plz

permissions:
  pull-requests: write
  contents: write

on:
  push:
    branches:
      - main

jobs:
  release-plz:
    name: release-plz
    runs-on: ubuntu-latest
    if: ${{ github.repository_owner == 'davidsmfreire' }}
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
          # Use the PAT for checkout too so subsequent pushes (tags,
          # release commits) are authenticated as the PAT owner and
          # trigger downstream workflows like the maturin CI build.
          token: ${{ secrets.RELEASE_PLZ_TOKEN }}
      - uses: dtolnay/rust-toolchain@stable
      - name: release-plz
        uses: MarcoIeni/release-plz-action@v0.5
        env:
          # PAT with `contents: write` and `pull_requests: write`. The
          # default GITHUB_TOKEN cannot trigger downstream workflows
          # (e.g. tag-driven PyPI wheel builds), so release-plz must
          # push tags using a PAT instead.
          GITHUB_TOKEN: ${{ secrets.RELEASE_PLZ_TOKEN }}
          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}