chore: ci/cd

Author: varonix0

.github/workflows/release.yml

@@ -0,0 +1,47 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*.*.*"
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    permissions:
+      id-token: write
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: "3.3"
+          bundler-cache: true
+
+      - name: Verify tag matches Infisical::VERSION
+        run: |
+          TAG_VERSION="${GITHUB_REF_NAME#v}"
+          GEM_VERSION="$(ruby -r ./lib/infisical/version -e 'puts Infisical::VERSION')"
+          if [ "$TAG_VERSION" != "$GEM_VERSION" ]; then
+            echo "::error::Tag ${GITHUB_REF_NAME} does not match Infisical::VERSION (${GEM_VERSION})."
+            echo "::error::Bump lib/infisical/version.rb on main, then re-tag."
+            exit 1
+          fi
+
+      - name: Run tests
+        run: bundle exec rspec
+
+      - name: Run rubocop
+        run: bundle exec rubocop
+
+      - name: Configure RubyGems credentials (trusted publishing)
+        uses: rubygems/configure-rubygems-credentials@v1
+
+      - name: Build gem
+        run: gem build infisical-sdk.gemspec
+
+      - name: Push to RubyGems
+        run: gem push "infisical-sdk-${GITHUB_REF_NAME#v}.gem"