backport release workflow

Author: adamralph

.github/workflows/release.yml

@@ -2,7 +2,9 @@ name: release
 on:
   push:
     tags: ["*.*.*"]
-permissions: read-all
+  workflow_dispatch:
+permissions:
+  id-token: write
 env:
   DOTNET_NOLOGO: true
   DOTNET_SKIP_FIRST_TIME_EXPERIENCE: true
@@ -17,10 +19,12 @@ jobs:
       - uses: actions/checkout@v6.0.1
         with:
           persist-credentials: false
-      - run: dotnet build --configuration Release --nologo
+      - run: ./build pack
+      - uses: NuGet/login@d22cc5f58ff5b88bf9bd452535b4335137e24544 # v1
+        id: nuget-login
+        with:
+          user: ${{ secrets.NUGET_USER }}
       - name: push
         env:
-          SOURCE: ${{ secrets.NUGET_PUSH_SOURCE }}
-          API_KEY: ${{ secrets.NUGET_PUSH_API_KEY }}
-        if: env.SOURCE != '' || env.API_KEY != ''
-        run: dotnet nuget push ./**/*.nupkg --source "$SOURCE" --api-key "$API_KEY"
+          API_KEY: ${{steps.nuget-login.outputs.NUGET_API_KEY}}
+        run: dotnet nuget push ./**/Release/*.nupkg --api-key "$API_KEY" --source https://api.nuget.org/v3/index.json