Release: Bump the plugin version, add a changelog, and update the POT… #9

	on:
	push:
	tags:
	- "**"

	name: Upload Release Asset

	permissions:
	contents: read

	jobs:
	build:
	name: Upload Release Asset
	runs-on: ubuntu-latest
	permissions:
	attestations: write
	id-token: write
	contents: write
	steps:
	- name: Harden the runner (Audit all outbound calls)
	uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
	with:
	egress-policy: audit

	- name: Checkout code
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Get tag
	id: tag
	run: echo "tag=${GITHUB_REF#refs/tags/}" >> $GITHUB_OUTPUT

	- name: Build project
	run: git archive -o /tmp/${{ github.event.repository.name }}.zip --prefix=${{ github.event.repository.name }}/ ${{ steps.tag.outputs.tag }}

	- name: Create Release
	id: create_release
	uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631 # v2.2.2
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	with:
	files: /tmp/${{ github.event.repository.name }}.zip

	- name: Build provenance attestation
	uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
	with:
	subject-path: /tmp/${{ github.event.repository.name }}.zip

Provide feedback