Merge pull request #388 from bolshakov/hotfix/v5.3.2

Fixe release workflow permissions and trigger

Author: bolshakov

.github/workflows/ci.yml

@@ -3,7 +3,7 @@ name: 🚦Stoplight
 on:
   pull_request:
   push:
-    branches: [ master ]
+    branches: [ main ]
 
 permissions:  # added using https://github.com/step-security/secure-repo
   contents: read

.github/workflows/release.yml

@@ -1,21 +1,22 @@
 name: Release 🚀
 on:
-  release:
-    types: [published]
+  push:
+    branches: [ main ]
 
 env:
   version: ${{ github.event.release.tag_name }}
   docker_username: ${{ secrets.DOCKER_HUB_USERNAME }}
   docker_password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
 
-permissions:  # added using https://github.com/step-security/secure-repo
-  contents: read
-
 jobs:
   gem:
     name: Ruby Gem 📦
     runs-on: ubuntu-latest
-    environment: releases
+    environment: release
+    permissions:
+      contents: read
+      id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
+      contents: write # IMPORTANT: this permission is required for `rake release` to push the release tag
     steps:
       - name: Harden the runner (Audit all outbound calls)
         uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
@@ -38,7 +39,9 @@ jobs:
     name: Docker Image 🐳
     needs: [gem]
     runs-on: ubuntu-latest
-    environment: releases
+    environment: release
+    permissions:
+      contents: read
     steps:
       - name: Harden the runner (Audit all outbound calls)
         uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0

Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    stoplight (5.3.1)
+    stoplight (5.3.2)
       zeitwerk
 
 GEM

lib/stoplight/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Stoplight
-  VERSION = Gem::Version.new("5.3.1")
+  VERSION = Gem::Version.new("5.3.2")
 end