Add action for trusted release

Author: svoop

.github/workflows/release.yml

@@ -0,0 +1,35 @@
+name: Release gem
+
+on:
+  push:
+    tags:
+      - v*
+
+permissions:
+  contents: read
+
+jobs:
+  push:
+    if: github.repository == 'svoop/minitest-substitute'
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: write
+      id-token: write
+
+    environment: release
+
+    steps:
+      - name: Harden runner
+        uses: step-security/[email protected]
+        with:
+          egress-policy: audit
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          bundler-cache: true
+          ruby-version: ruby
+      - uses: rubygems/release-gem@v1

CHANGELOG.md

@@ -1,33 +1,34 @@
 ## Main
 
-#### Changes
+### Changes
 * Update Ruby to 3.4
+* Add action for trusted release
 
 ## 1.0.0
 
-#### Breaking Changes
+### Breaking Changes
 * Switch from `with` to `substitute` because Rails 7 pollutes `Object` for
   everybody by introducing `Object#with`. 💣
 
 ## 0.3.0
 
-#### Additions
+### Additions
 * Substition of constants
 
 ## 0.2.1
 
-#### Changes
+### Changes
 * Defer evaluation of the substitution value block for specs
 
 ## 0.2.0
 
-#### Additions
+### Additions
 * Refactor to support class variables as well
 * Use declared subject as default target for with helper
 
 ## 0.1.0
 
-#### Initial Implementation
+### Initial Implementation
 * Require Ruby 3.0
 * Substitution of instance variables
 * Substitution of global variables