Push tags on releases

Author: xfalcox

.github/workflows/ci.yml

@@ -29,6 +29,7 @@ jobs:
 
     permissions:
       id-token: write
+      contents: write
 
     steps:
       - uses: actions/checkout@v4
@@ -38,5 +39,12 @@ jobs:
           node-version: "24"
           cache: pnpm
       - run: pnpm install
+      - name: Create and push git tag
+        run: |
+          VERSION=$(node -p "require('./package.json').version")
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git tag -a "v${VERSION}" -m "Release v${VERSION}"
+          git push origin "v${VERSION}"
       - name: Publish package
         run: pnpm publish -r