release plz: dry-run in ci

Author: Firestar99

.github/workflows/rust-ci.yml

@@ -93,27 +93,28 @@ jobs:
           submodules: true
       - uses: EmbarkStudios/cargo-deny-action@v2
 
-  publish-check:
-    name: Publish Check
-    runs-on: ubuntu-22.04
+  release-plz-dry-run:
+    name: Release-plz dry-run
+    runs-on: ubuntu-latest
+    permissions: {}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
+          fetch-depth: 0
+          persist-credentials: false
           submodules: true
-      - uses: cargo-bins/cargo-binstall@main
-      - run: cargo binstall cargo-release
-      - run: cargo fetch --locked
-      # cargo release in workspace root doesn't actually run `publish check` on any crate, do so manually
-      - name: cargo publish check spirv-tools-sys
-        run: cargo release patch --allow-branch=* --manifest-path spirv-tools-sys/Cargo.toml
-      - name: cargo publish check spirv-tools
-        run: cargo release patch --allow-branch=* --manifest-path spirv-tools/Cargo.toml
+      - name: Run release-plz
+        uses: release-plz/action@v0.5
+        with:
+          dry_run: true
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   # This allows us to have a single job we can branch protect on, rather than needing
   # to update the branch protection rules when the test matrix changes
   test_success:
     runs-on: ubuntu-24.04
-    needs: [lint, test, deny-check, publish-check]
+    needs: [lint, test, deny-check, release-plz-dry-run]
     # Hack for buggy GitHub Actions behavior with skipped checks: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/collaborating-on-repositories-with-code-quality-features/troubleshooting-required-status-checks#handling-skipped-but-required-checks
     if: ${{ always() }}
     steps:
@@ -123,7 +124,7 @@ jobs:
           [[ "${{ needs.lint.result }}" == "success" ]] || exit 1
           [[ "${{ needs.test.result }}" == "success" ]] || exit 1
           [[ "${{ needs.deny-check.result }}" == "success" ]] || exit 1
-          [[ "${{ needs.publish-check.result }}" == "success" ]] || exit 1
+          [[ "${{ needs.release-plz-dry-run.result }}" == "success" ]] || exit 1
 
 defaults:
   run: