RSCBC-257: Update publish workflow to use cargo release

Author: chvck

.github/workflows/publish.yml

@@ -1,22 +1,48 @@
-name: Publish crate
+name: Publish crates
 on:
   push:
     tags:
       - v*
 
 jobs:
+  tests:
+    uses: ./.github/workflows/tests.yml
+    secrets: inherit
+
+  dry-run:
+    needs: tests
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Setup Rust toolchain and cache
+        uses: actions-rust-lang/setup-rust-toolchain@v1
+
+      - name: Install cargo-release
+        run: cargo install cargo-release --version 1.1.1 --locked
+
+      - name: Dry run
+        run: cargo release --workspace
+
   publish:
+    needs: dry-run
     runs-on: ubuntu-latest
+    environment: crates-io
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v3
 
       - name: Setup Rust toolchain and cache
         uses: actions-rust-lang/setup-rust-toolchain@v1
 
-      - name: Publish
+      - name: Install cargo-release
+        run: cargo install cargo-release --version 1.1.1 --locked
+
+      - uses: rust-lang/crates-io-auth-action@v1
+        id: auth
+
+      - name: Publish crates
         env:
-          CARGO_REGISTRY_TOKEN: ${{secrets.CARGO_REGISTRY_TOKEN}}
-        run: |
-          cargo publish -p couchbase-connstr
-          cargo publish -p couchbase-core
-          cargo publish -p couchbase
+          CARGO_REGISTRY_TOKEN: ${{ steps.auth.outputs.token }}
+        run: cargo release --workspace --no-confirm --execute

.github/workflows/tests.yml

@@ -2,11 +2,10 @@ name: Run Tests
 
 on:
   push:
-    tags:
-      - v*
     branches:
       - main
   pull_request:
+  workflow_call:
   schedule:
     - cron: "0 5 * * *"  # daily at 05:00 UTC
 

release.toml

@@ -0,0 +1,17 @@
+# cargo-release configuration
+# Run: cargo release --workspace --no-confirm --execute
+# Publishes crates in dependency order, skipping already-published versions.
+
+# Don't publish protostellar to crates.io
+[[packages]]
+name = "protostellar"
+release = false
+
+[workspace]
+# Only publish — no version bumping, commits, tags, or pushes
+publish = true
+push = false
+tag = false
+commit = false
+# Allow running from main branch or detached HEAD (e.g. CI on a tag)
+allow-branch = ["main", "HEAD"]