Add Trusted Publishing workflow (#536)

.github/workflows/release.yml

@@ -0,0 +1,32 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - addressable-*
+
+jobs:
+  release:
+    if: github.repository == 'sporkmonger/addressable'
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write # for trusted publishing
+    steps:
+      # tags are named addressable-VERSION, e.g. addressable-2.8.6
+      - name: Set VERSION from git tag
+        run: echo "VERSION=$(echo ${{ github.ref }} | cut -d - -f 2)" >> "$GITHUB_ENV"
+
+      - uses: actions/checkout@v4
+
+      - uses: ruby/setup-ruby@v1
+        with:
+          bundler-cache: true
+          ruby-version: ruby
+
+      - uses: rubygems/[email protected]
+
+      # ensure gem can be built and installed
+      - run: bundle exec rake gem:install
+
+      # push gem to rubygems.org
+      - run: gem push --verbose pkg/addressable-${VERSION}.gem

RELEASING.md

@@ -0,0 +1,12 @@
+# Releasing Addressable
+
+1. Update `CHANGELOG.md`
+1. Update `lib/addressable/version.rb` with the new version
+1. Run `rake gem:gemspec` to update gemspec
+1. Run `rake gem:install` to sanity check your work
+1. Create pull request with all that
+1. Merge the pull request when CI is green
+1. Ensure you have latest changes locally
+1. Run`VERSION=x.y.z rake git:tag:create` to create tag in git
+1. Push tag to upstream: `git push --tags upstream`
+1. Watch GitHub Actions build and push the gem to RubyGems.org

Rakefile

@@ -34,7 +34,4 @@ PKG_FILES = FileList[
 
 task :default => "spec"
 
-WINDOWS = (RUBY_PLATFORM =~ /mswin|win32|mingw|bccwin|cygwin/) rescue false
-SUDO = WINDOWS ? '' : ('sudo' unless ENV['SUDOLESS'])
-
 Dir['tasks/**/*.rake'].each { |rake| load rake }

tasks/gem.rake

@@ -56,7 +56,7 @@ namespace :gem do
 
   desc "Install the gem"
   task :install => ["clobber", "gem:package"] do
-    sh "#{SUDO} gem install --local pkg/#{GEM_SPEC.full_name}"
+    sh "gem install --local ./pkg/#{GEM_SPEC.full_name}.gem"
   end
 
   desc "Uninstall the gem"
@@ -65,7 +65,7 @@ namespace :gem do
     if installed_list &&
         (installed_list.collect { |s| s.version.to_s}.include?(PKG_VERSION))
       sh(
-        "#{SUDO} gem uninstall --version '#{PKG_VERSION}' " +
+        "gem uninstall --version '#{PKG_VERSION}' " +
         "--ignore-dependencies --executables #{PKG_NAME}"
       )
     end