Break release into 3 jobs

.github/workflows/release.yaml

@@ -5,16 +5,41 @@ on:
   workflow_dispatch:
   push:
     tags:
-      - v0.19.*
+      - v*
 
 permissions:
   contents: read
 
 jobs:
 
-  deploy:
+  python-packages:
 
-    name: Build everything
+    name: Release Python packages
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
+    environment:
+      name: release
+
+    steps:
+
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Get version
+        id: version
+        run: echo VERSION=$(git describe --exact-match --tags | sed 's/^v//') >> $GITHUB_OUTPUT
+
+      - name: Build packages
+        run: make packages VERSION=${{ steps.version.outputs.VERSION }}
+
+      - name: Publish release distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+
+  deploy-container-image:
+
+    name: Release container image
     runs-on: ubuntu-latest
     permissions:
       contents: write
@@ -33,21 +58,10 @@ jobs:
           username: ${{ vars.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_SECRET }}
 
-      - name: Install build dependencies
-        run: pip3 install jsonnet
-
       - name: Get version
         id: version
         run: echo VERSION=$(git describe --exact-match --tags | sed 's/^v//') >> $GITHUB_OUTPUT
 
-      - run: echo ${{ steps.version.outputs.VERSION }}
-
-      - name: Build packages
-        run: make packages VERSION=${{ steps.version.outputs.VERSION }}
-
-      - name: Publish release distributions to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
-
       - name: Extract metadata for container
         id: meta
         uses: docker/metadata-action@v4
@@ -73,6 +87,31 @@ jobs:
       - name: Create deploy bundle
         run: templates/generate-all deploy.zip ${{ steps.version.outputs.VERSION }}
 
+  release-bundle:
+
+    name: Upload release bundle
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
+    environment:
+      name: release
+
+    steps:
+
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install build dependencies
+        run: pip3 install jsonnet
+
+      - name: Get version
+        id: version
+        run: echo VERSION=$(git describe --exact-match --tags | sed 's/^v//') >> $GITHUB_OUTPUT
+
+      - name: Create deploy bundle
+        run: templates/generate-all deploy.zip ${{ steps.version.outputs.VERSION }}
+
       - uses: ncipollo/release-action@v1
         with:
           artifacts: deploy.zip