ci: 🎡 use gh cli for creating release PRs

.github/workflows/publish.yml

@@ -8,16 +8,26 @@ on:
   workflow_dispatch:
 
 jobs:
+  build:
+    name: Build source distribution and wheels
+    uses: ./.github/workflows/wheels.yml
+    if: github.event.pull_request.merged == true && github.event.pull_request.head.ref == ${{ vars.RELEASE_PR_BRANCH || 'create-pull-request/patch' }}
+
   publish:
     runs-on: ubuntu-latest
     if: github.event.pull_request.merged == true && github.event.pull_request.head.ref == ${{ vars.RELEASE_PR_BRANCH || 'create-pull-request/patch' }}
     concurrency: publish
-    outputs:
-      should-publish:
+    needs: [build]
+    permissions:
+      id-token: write
+      contents: write
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
 
+      - name: Download artifacts
+        uses: actions/download-artifact@v4
+
       - name: Publish to GitHub Releases
         if: github.event_name == 'workflow_dispatch'
         uses: python-semantic-release/upload-to-gh-release@main

.github/workflows/release.yml

@@ -70,20 +70,13 @@ jobs:
           force: "patch"
           github_token: ${{ secrets.GITHUB_TOKEN }}
           root_options: "-v"
-          push: "false"
 
       - name: Create PR
-        id: cpr
-        uses: peter-evans/create-pull-request@v6
         if: steps.release.outputs.released == 'true'
-        with:
-          base: main
-          assignees: ${{ github.repository_owner }}
-          title: "Release ${{ steps.release.outputs.version }}"
-        env:
-          # ☠️ https://github.com/peter-evans/create-pull-request/issues/60#issuecomment-1923812338
-          GITHUB_TOKEN: ${{ secrets.GITHUB_PAT }}
-
-      - name: Finalize
         run: |
-          echo 🪄✨ PR created at: ${{ steps.cpr.outputs.pull-request-url }}
+          gh pr create -B main -H $RELEASE_PR_BRANCH \
+            --title 'Merge $RELEASE_PR_BRANCH into main' \
+            --body '🤖'
+        env:
+          PR_TITLE: "Release ${{ steps.release.outputs.version }}"
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}