name: 'Publish Immutable Action Version'

on:
  push:
    tags:
      # Match version tags, but not the major version tags.
      - 'v[0-9]+.**'

defaults:
  run:
    shell: bash

jobs:
  publish:
    runs-on: ubuntu-slim
    permissions:
      contents: read
      id-token: write
      packages: write

    steps:
      - name: Checkout repository
        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3

      - name: Publish immutable release
        id: publish
        uses: actions/publish-immutable-action@4bc8754ffc40f27910afb20287dbbbb675a4e978 # v0.0.4