Move draft into CI

.github/workflows/ci.yml

@@ -61,6 +61,15 @@ jobs:
       - name: Checkout Repository
         uses: actions/checkout@v4
 
+      - name: Create/Update Draft
+        uses: lucacome/[email protected]
+        with:
+          minor-label: "enhancement"
+          major-label: "change"
+          publish: ${{ github.ref_type == 'tag' }}
+          collapse-after: 50
+        if: github.event_name != 'pull_request'
+
       - name: Docker Buildx
         uses: docker/setup-buildx-action@v3
 
@@ -73,6 +82,8 @@ jobs:
           tags: ${{ matrix.nginx_version }}
           cache-from: type=gha,scope=${{ matrix.nginx_version }}
           cache-to: type=gha,scope=${{ matrix.nginx_version }},mode=max
+          provenance: true
+          sbom: true
           target: export
           build-args: NGINX_VERSION=${{ matrix.nginx_version }}
           outputs: type=tar,dest=linux-amd64-nginx-${{ matrix.nginx_version }}-ngx_http_module.so.tar
@@ -84,5 +95,12 @@ jobs:
       - name: Upload artifact
         uses: actions/upload-artifact@v3
         with:
-          name: linux-amd64-nginx-${{ matrix.nginx_version }}-ngx_http_module.so.tgz
+          name: linux-amd64-nginx-${{ matrix.nginx_version }}-ngx_http_module.so.tar.gz
           path: linux-amd64-nginx-${{ matrix.nginx_version }}-ngx_http_module.so.tar.gz
+
+      - name: Upload binaries on release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        if: github.ref_type == 'tag'
+        run: |
+          gh release upload ${{ github.ref_name }} linux-amd64-nginx-${{ matrix.nginx_version }}-ngx_http_module.so.tar.gz --clobber