Run release-plz with approval gate

Author: MidasLamb

.github/workflows/release-plz.yml

@@ -1,17 +1,16 @@
 name: Release-plz
 
-permissions:
-  pull-requests: write
-  contents: write
-
 on:
   push:
     branches:
       - master
 
 jobs:
-  release-plz:
-    name: Release-plz
+  release-plz-pr:
+    permissions:
+      contents: write
+      pull-requests: write
+    name: Release-plz-pr
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
@@ -27,3 +26,25 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
+
+  # Release unpublished packages.
+  release-plz-release:
+    name: Release-plz release
+    environment: "crates.io"
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+      - name: Run release-plz
+        uses: release-plz/[email protected]
+        with:
+          command: release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}