Complete the publish pipeline (#372)

Author: mtlynch

.circleci/config.yml

@@ -169,6 +169,29 @@ jobs:
           root: ./
           paths:
             - ./dist
+  publish_release:
+    executor: base
+    environment:
+      GITHUB_TOKEN: "${GITHUB_TOKEN}"
+    steps:
+      - attach_workspace:
+          at: ./
+      - run:
+          name: Install GitHub CLI
+          command: |
+            curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg | sudo dd of=/usr/share/keyrings/githubcli-archive-keyring.gpg
+            sudo chmod go+r /usr/share/keyrings/githubcli-archive-keyring.gpg
+            echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" | sudo tee /etc/apt/sources.list.d/github-cli.list > /dev/null
+            sudo apt update
+            sudo apt install gh
+      - run:
+          name: Create and upload release
+          command: |
+            gh release create "${CIRCLE_TAG}" ./dist/* \
+              --repo "${CIRCLE_PROJECT_USERNAME}/${CIRCLE_PROJECT_REPONAME}" \
+              --title "${CIRCLE_TAG}" \
+              --notes "Release ${CIRCLE_TAG}" \
+              --verify-tag
   publish_docker_images:
     executor: base
     environment:
@@ -254,19 +277,28 @@ workflows:
           filters:
             tags:
               only: /.*/
-      - publish_docker_images:
+      - publish_release:
           requires:
             - check_whitespace
             - check_bash
             - check_frontend
             - test_go
             - lint_sql
             - build_backend
+            - package_release
           filters:
+            tags:
+              only: /[0-9]+(\.[0-9]+){2}/
             branches:
-              only: master
+              ignore: /.*/
+      - publish_docker_images:
+          requires:
+            - package_release
+          filters:
             tags:
-              only: /.*/
+              only: /[0-9]+(\.[0-9]+){2}/
+            branches:
+              ignore: /.*/
       - deploy:
           requires:
             - check_whitespace