Add action for trusted release

Author: svoop

.github/workflows/release.yml

@@ -0,0 +1,35 @@
+name: Release gem
+
+on:
+  push:
+    tags:
+      - v*
+
+permissions:
+  contents: read
+
+jobs:
+  push:
+    if: github.repository == 'svoop/rodbot'
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: write
+      id-token: write
+
+    environment: release
+
+    steps:
+      - name: Harden runner
+        uses: step-security/[email protected]
+        with:
+          egress-policy: audit
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          bundler-cache: true
+          ruby-version: ruby
+      - uses: rubygems/release-gem@v1

CHANGELOG.md

@@ -2,100 +2,101 @@
 
 ### Changes
 * Drop certs note in README
+* Add action for trusted release
 
 ## 0.5.2
 
-#### Fixes
+### Fixes
 * Update Docker template for Ruby 3.4.2
 
 ## 0.5.1
 
-#### Changes
+### Changes
 * Update Docker compose templates
 
 ## 0.5.0
 
-#### Changes
+### Changes
 * Make GitLab and GitHub plugins customizable
 
 ## 0.4.5
 
-#### Changes
+### Changes
 * Update Ruby to 3.4
 
 ## 0.4.4
 
-#### Changes
+### Changes
 * Adhere to plugin file layout suggestions
 * Support Ruby 3.3
 * Honor `APP_ENV` as an alternative to `RODBOT_ENV`
 
 ## 0.4.3
 
-#### Changes
+### Changes
 * Add more languages to the word of the day demo plugin
 
 ## 0.4.2
 
-#### Fixes
+### Fixes
 * Pass the time zone down to Clockwork
 
 ## 0.4.1
 
-#### Fixes
+### Fixes
 * Fix init of memoization cache
 
 ## 0.4.0
 
-#### Breaking Changes
+### Breaking changes
 * Rename `timezone` config to `time_zone` and properly implement and document
   time zone handling
 
 ## 0.3.4
 
-#### Additions
+### Additions
 * Support to post to secondary rooms with `Rodbot.say`
 * `Rodbot::Message` container class for messages with meta data
 
 ## 0.3.3
 
-#### Additions
+### Additions
 * Support placeholders when using `Rodbot.say` and add `[[EVERYBODY]]`
   placeholder to mention all hands in a room or channel
 
 ## 0.3.2
 
-#### Additions
+### Additions
 * Simple /healthz route e.g. for deployments on render.com
 * Deploy templates for render.com
 
-#### Changes
+### Changes
 * Switch from httparty to httpx
 
 ## 0.3.1
 
-#### Fixes
+### Fixes
 * Explicitly require Forwardable
 
 ## 0.3.0
 
-#### Additions
+### Additions
 * Built-in plugin for Slack
 
 ## 0.2.0
 
-#### Fixes
+### Fixes
 * Fix OTP verification
 * Drop futile files from packaged gem
 
 ## 0.1.1
 
-#### Fixes
+### Fixes
 * Fix `rodbot new` by making `config/rodbot.rb` optional
 
 ## 0.1.0
 
-#### Initial Implementation
+### Initial implementation
 * Rodbot CLI
 * App, relay and schedule services
 * Framework functionality such as config, credentials, logging, data