I think we all agree that this would be a good idea.

We have a few options here IMO:

• Have a GitHub Action triggered on tag, that runs the release processes
  • 2 stage: bump+tag+bump+push (releaser), build+publish (automation)
  • Needs auth/API token management
  • Consistent build environment
• Add something like https://github.com/pradyunsg/vendoring/blob/master/noxfile.py#L103-L146
  • Runs on the release manager's system
  • Performs exactly the same steps as a manual release process, except automatically.
• A combination of the two above?
  • version bumping + tagging + push is done by automation locally.
  • package building + publishing is done by CI automation.

Personally, I think doing 2, then 3 would be easiest -- partly because I am familiar with the second approach. :)