chore: add release-please to CI

.github/workflows/publish.yml

@@ -2,6 +2,11 @@ name: publish
 
 on: push
 
+# Required by release-please
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   build:
     name: build 📦
@@ -23,12 +28,23 @@ jobs:
       with:
         name: python-package-distributions
         path: dist/
-
+
+  # creates a release PR as appropriate, or if a release PR is merged
+  # creates a tag and gh release
+  release-please:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: googleapis/release-please-action@v4
+      id: release
+      if: github.ref == 'refs/heads/master'
+      with:
+        token: ${{ secrets.GITHUB_TOKEN }}
+        release-type: python
+
   publish-to-pypi:
     name: push pypi
     if: startsWith(github.ref, 'refs/tags/')  # only publish to PyPI on tag pushes
-    needs:
-    - build
+    needs: [build, release-please]
     runs-on: ubuntu-latest
     environment:
       name: pypi
@@ -67,14 +83,6 @@ jobs:
         inputs: >-
           ./dist/*.tar.gz
           ./dist/*.whl
-    - name: Create GitHub Release
-      env:
-        GITHUB_TOKEN: ${{ github.token }}
-      run: >-
-        gh release create
-        '${{ github.ref_name }}'
-        --repo '${{ github.repository }}'
-        --notes ""
     - name: Upload artifact signatures to GitHub Release
       env:
         GITHUB_TOKEN: ${{ github.token }}