Add release workflow to publish CRuby gem via trusted publishing

[yahonda]

Summary

Adds .github/workflows/release.yml triggered on v* tag pushes. The workflow builds the gem on CRuby 4.0 and pushes it to RubyGems.org via OIDC trusted publishing, so no long-lived API key secret has to live in the repository settings.

Modeled on the equivalent workflow added to rsim/oracle-enhanced in rsim/oracle-enhanced@55575ef, minus the JRuby platform build (ruby-plsql only ships a single platform gem).

Jobs

• build-cruby — ruby/setup-ruby@v1 with Ruby 4.0, runs gem build ruby-plsql.gemspec, uploads the .gem as an artifact.
• release — depends on build-cruby, downloads the artifact, configures RubyGems credentials via rubygems/configure-rubygems-credentials@v1, and gem pushes. Runs in the rubygems environment with id-token: write for OIDC.

Prerequisite

Trusted publishing must be enabled for this repository on RubyGems.org before the workflow can push gems (see https://guides.rubygems.org/trusted-publishing/).

Test plan

• Enable trusted publishing on rubygems.org for ruby-plsql
• Push a v* tag and confirm the build-cruby + release jobs run green
• Confirm the new gem version shows up on rubygems.org

🤖 Generated with Claude Code

[Copilot]

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Adds a GitHub Actions release workflow to build and publish the ruby-plsql gem to RubyGems.org on v* tag pushes using OIDC trusted publishing (no stored API key).

Changes:

• Introduces a build-cruby job to build the gem and upload it as an artifact
• Introduces a release job to download the artifact, configure RubyGems OIDC credentials, and push the gem

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[yahonda]

ruby-plsql 0.9.0 has been released successfully https://github.com/rsim/ruby-plsql/actions/runs/24319392558