chore: proper gem publish

Author: nicolasleger

.github/workflows/publish.yml

@@ -0,0 +1,28 @@
+name: Publish gem on Rubygems
+
+on:
+  release:
+    types:
+      - published
+
+permissions:
+  contents: write
+  id-token: write
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
+    environment: release
+    steps:
+      - uses: actions/checkout@v5
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ${{ vars.RUBY_VERSION }}
+          bundler-cache: true
+      - name: Build gem
+        run: gem build *.gemspec
+      - name: Publish gem
+        uses: rubygems/release-gem@v1

.github/workflows/release-please.yml

@@ -1,7 +1,6 @@
-name: Run release-please and publish gem
+name: Run release-please
 
 on:
-  workflow_dispatch: # Allow manual triggering of the workflow
   push:
     branches:
       - main
@@ -12,7 +11,6 @@ permissions:
   pull-requests: write
 
 jobs:
-
   release-please:
     runs-on: ubuntu-latest
     env:
@@ -21,30 +19,9 @@ jobs:
       contents: write
       id-token: write
       pull-requests: write
-    outputs:
-      release_created: ${{ steps.release.outputs.release_created }}
     steps:
       - uses: GoogleCloudPlatform/release-please-action@v4
         id: release
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           release-type: ruby
-
-  publish:
-    needs: release-please
-    runs-on: ubuntu-latest
-    if: ${{ needs.release-please.outputs.release_created }}
-    permissions:
-      id-token: write
-      contents: read
-    environment: release
-    steps:
-      - uses: actions/checkout@v5
-      - uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: ${{ vars.RUBY_VERSION }}
-          bundler-cache: true
-      - name: Build gem
-        run: gem build *.gemspec
-      - name: Publish gem
-        uses: rubygems/release-gem@v1

.github/workflows/semantic-pr.yml

@@ -7,10 +7,15 @@ on:
       - edited
       - synchronize
 
+permissions:
+  pull-requests: read
+
 jobs:
   main:
     name: Validate PR title
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: read
     steps:
       - uses: amannn/action-semantic-pull-request@v6
         env: