ci: adopt blueprint release pipeline

.github/workflows/docs.yml

@@ -7,7 +7,7 @@ on:
     branches: [main]
   workflow_dispatch:  # Manual trigger
   workflow_run:
-    workflows: ["Release (Manual)", "Release Please"]
+    workflows: ["Publish"]
     types: [completed]
 
 permissions:

.github/workflows/publish.yaml

@@ -0,0 +1,62 @@
+name: Publish
+
+on:
+  push:
+    tags: ["v*"]
+  workflow_call:
+    inputs:
+      tag:
+        required: true
+        type: string
+
+permissions:
+  contents: write
+  id-token: write
+  attestations: write
+
+jobs:
+  publish:
+    name: Build & publish to PyPI
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    environment:
+      name: pypi
+      url: https://pypi.org/project/xarray_plotly
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.tag || github.ref_name }}
+          fetch-depth: 0
+
+      - uses: astral-sh/setup-uv@v7
+        with:
+          enable-cache: true
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Build
+        run: uv build
+
+      - uses: pypa/gh-action-pypi-publish@release/v1
+
+  github-release:
+    name: Create GitHub Release
+    if: github.event_name == 'push'
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.ref_name }}
+
+      - name: Create GitHub Release
+        run: |
+          if [[ "$TAG" == *-* ]]; then
+            gh release create "$TAG" --generate-notes --prerelease
+          else
+            gh release create "$TAG" --generate-notes
+          fi
+        env:
+          GH_TOKEN: ${{ github.token }}
+          TAG: ${{ github.ref_name }}

.github/workflows/release.yml → .github/workflows/release.yaml

@@ -3,16 +3,6 @@ name: Release
 on:
   push:
     branches: [main]
-  workflow_dispatch:
-    inputs:
-      branch:
-        description: Branch to create the release from
-        required: true
-        default: main
-      prerelease:
-        description: Create a pre-release
-        type: boolean
-        default: false
 
 permissions:
   contents: write
@@ -35,17 +25,17 @@ jobs:
       - uses: googleapis/release-please-action@v4
         id: release
         with:
+          token: ${{ steps.app-token.outputs.token }}
           config-file: .release-please-config.json
           manifest-file: .release-please-manifest.json
-          token: ${{ steps.app-token.outputs.token }}
-          target-branch: ${{ inputs.branch || github.ref_name }}
-          prerelease: ${{ inputs.prerelease }}
 
   publish:
-    needs: [release-please]
+    needs: release-please
     if: needs.release-please.outputs.release_created
     permissions:
       id-token: write
-    uses: ./.github/workflows/publish.yml
+      contents: write
+      attestations: write
+    uses: ./.github/workflows/publish.yaml
     with:
       tag: ${{ needs.release-please.outputs.tag_name }}