Split build & release further.

.github/workflows/ci.yml

@@ -115,8 +115,6 @@ jobs:
       - uses: actions/checkout@v3
       - name: Setup Python
         uses: actions/setup-python@v4
-        with:
-          python-version: "3.8"
       - name: Check release
         id: check_release
         run: |
@@ -136,4 +134,3 @@ jobs:
           autopub prepare
           autopub build
           autopub commit
-          autopub githubrelease

.github/workflows/pypi-package.yml

@@ -2,9 +2,8 @@
 name: Build & upload PyPI package
 
 on:
-  release:
-    types:
-      - published
+  push:
+    tags: ["*"]
 
 jobs:
   build-package:
@@ -22,14 +21,18 @@ jobs:
 
   release-pypi:
     name: Publish released package to pypi.org
-    environment: release-pypi # TODO: how to name the env
-    if: github.event.action == 'published'
+    environment: Deployment
     runs-on: ubuntu-latest
     needs: build-package
     permissions:
       id-token: write
+      contents: write
 
     steps:
+      - uses: actions/checkout@v3
+      - name: Setup Python
+        uses: actions/setup-python@v4
+
       - name: Download packages built by build-and-inspect-python-package
         uses: actions/download-artifact@v3
         with:
@@ -40,3 +43,8 @@ jobs:
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
           repository-url: https://test.pypi.org/legacy/ # TODO: Move over to actual PyPI
+
+      - name: Create Github release
+        run: |
+          pip install autopub[github]
+          autopub githubrelease