ci: combines release and publish into a shared workflow

.github/workflows/release.yml

@@ -23,6 +23,7 @@ jobs:
         with:
           # https://github.com/google-github-actions/release-please-action#configuration
           release-type: python
+          package-name: poetry-plugin-upgrade
           changelog-types: >
             [
               {"type": "build", "section": "🏗️ Build System", "hidden": true},
@@ -38,3 +39,46 @@ jobs:
               {"type": "test", "section": "✅ Tests", "hidden": true}
             ]
           include-v-in-tag: false
+
+  publish:
+    name: publish
+    runs-on: ubuntu-latest
+    needs: release
+    # only run when a new release is created
+    if: ${{ needs.release.outputs.release_created }}
+    strategy:
+      fail-fast: true
+      matrix:
+        environment: [ testpypi, pypi ]
+    environment: ${{ matrix.environment }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: '3.10'
+
+      - name: Install poetry
+        uses: snok/install-poetry@v1
+        with:
+          version: 1.6.0
+
+      - name: Build
+        run: poetry build
+
+      - name: Publish testpypi
+        if: ${{ matrix.environment=='testpypi' }}
+        env:
+          POETRY_REPOSITORIES_TESTPYPI_URL: https://test.pypi.org/legacy/
+          POETRY_HTTP_BASIC_TESTPYPI_USERNAME: __token__
+          POETRY_HTTP_BASIC_TESTPYPI_PASSWORD: ${{secrets.TESTPYPI_API_TOKEN}}
+        run: poetry publish --repository testpypi
+
+      - name: Publish pypi
+        if: ${{ matrix.environment=='pypi' }}
+        env:
+          POETRY_HTTP_BASIC_PYPI_USERNAME: __token__
+          POETRY_HTTP_BASIC_PYPI_PASSWORD: ${{secrets.PYPI_API_TOKEN}}
+        run: poetry publish