ci: remove separate v8 workflow

.github/workflows/main.yml

@@ -5,6 +5,7 @@ on:
   push:
     branches:
       - master
+      - "8.0.x"
 
 jobs:
   test:
@@ -58,6 +59,9 @@ jobs:
     needs: [ test, mypy ]
     outputs:
       new_sha: ${{ steps.sha.outputs.SHA }}
+    permissions:
+      id-token: write
+      contents: write
 
     steps:
       - name: Set up Python 3.9
@@ -101,15 +105,45 @@ jobs:
     concurrency: push
     needs: [ test, mypy, beautify ]
     if: github.repository == 'python-semantic-release/python-semantic-release'
+    permissions:
+      # https://docs.github.com/en/rest/overview/permissions-required-for-github-apps?apiVersion=2022-11-28#metadata
+      id-token: write
+      contents: write
 
     steps:
       - uses: actions/checkout@v3
         with:
           fetch-depth: 0
           ref: ${{ github.ref_name }}
       - name: Python Semantic Release
+        id: release
         uses: ./
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
-          repository_username: ${{ secrets.PYPI_USERNAME }}
-          repository_password: ${{ secrets.PYPI_PASSWORD }}
+          root_options: "-vv"
+
+      # https://github.com/pypa/gh-action-pypi-publish#specifying-a-different-username
+      # This will need converting to use trusted publishing at a later date
+      # see https://docs.pypi.org/trusted-publishers/
+      - name: Publish package distributions to PyPI
+        id: pypi-publish
+
+        # NOTE: DO NOT wrap the conditional in ${{ }} as it will always evaluate to true.
+        # See https://github.com/actions/runner/issues/1173
+        if: steps.release.outputs.released == 'true'
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          verbose: true
+          user: ${{ secrets.PYPI_USERNAME }}
+          password: ${{ secrets.PYPI_PASSWORD }}
+
+      - name: Publish package distributions to GitHub Releases
+        id: github-release
+
+        # NOTE: DO NOT wrap the conditional in ${{ }} as it will always evaluate to true.
+        # See https://github.com/actions/runner/issues/1173
+        if: steps.release.outputs.released == 'true'
+        uses: python-semantic-release/upload-to-gh-release@main
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          tag: ${{ steps.release.outputs.tag }}