Create GitHub releases from release workflow

Author: KSemenenko

.github/workflows/release.yml

@@ -6,7 +6,7 @@ on:
       - "v*"
 
 permissions:
-  contents: read
+  contents: write
 
 jobs:
   pack:
@@ -38,6 +38,17 @@ jobs:
       - name: Pack
         run: for project in src/*/*.csproj; do dotnet pack "$project" --configuration Release --no-build --output artifacts/packages; done
 
+      - name: Create GitHub release
+        env:
+          GH_TOKEN: ${{ github.token }}
+          TAG_NAME: ${{ github.ref_name }}
+        run: |
+          if gh release view "$TAG_NAME" > /dev/null 2>&1; then
+            gh release upload "$TAG_NAME" artifacts/packages/*.nupkg --clobber
+          else
+            gh release create "$TAG_NAME" artifacts/packages/*.nupkg --title "$TAG_NAME" --generate-notes --verify-tag
+          fi
+
       - name: Publish packages
         if: ${{ env.NUGET_API_KEY != '' }}
         run: dotnet nuget push "artifacts/packages/*.nupkg" --source https://api.nuget.org/v3/index.json --api-key "$NUGET_API_KEY" --skip-duplicate

AGENTS.md

@@ -64,6 +64,7 @@ Rule format:
 - Build: `dotnet build ManagedCode.LlmTck.slnx --configuration Release --no-restore`
 - Test: `dotnet test tests/ManagedCode.LlmTck.Tests/ManagedCode.LlmTck.Tests.csproj --configuration Release --no-build --verbosity normal`
 - Pack: `for project in src/*/*.csproj; do dotnet pack "$project" --configuration Release --no-build --output artifacts/packages; done`
+- Release: push a `vX.Y.Z` tag only after `Directory.Build.props` has the matching package version; the release workflow must create the GitHub Release and attach package artifacts, because a passing `main` CI run is not a release.
 - Format check: `dotnet format ManagedCode.LlmTck.slnx --verify-no-changes`
 - Tool restore: `dotnet tool restore`
 - Coverage gate: production code line coverage must stay at or above 90%; measure with coverlet/reportgenerator when coverage expectations change.