on:
  push:
    tags: '[0-9]+.[0-9]+.[0-9]+'

permissions: read-all

jobs:
  release:
    permissions:
      actions: read
      contents: write
      id-token: write
    uses: ./.github/workflows/publish-release.yml