Merge pull request #90 from heroku/refactor-annotated-tag

refactor: switch to annotated git tag

Author: alouie-sfdc

.github/workflows/tag-and-release.yml

@@ -47,22 +47,15 @@ jobs:
           echo "version=$VERSION" >> $GITHUB_OUTPUT
           echo "Extracted version: $VERSION"
 
-      - name: Set up GPG
-        run: |
-          echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --pinentry-mode loopback --passphrase-fd 0 --import <(echo "${{ secrets.GPG_PRIVATE_KEY }}")
-
       - name: Configure Git
         run: |
           git config --global user.name "GitHub Actions"
           git config --global user.email "github-actions@github.com"
-          git config --global user.signingkey ${{ secrets.GPG_KEY_ID }}
-          git config --global commit.gpgsign true
-          git config --global tag.gpgsign true
 
       - name: Create and push Github tag
         run: |
           echo "Creating tag v${{ steps.version.outputs.version }}"
-          echo "${{ secrets.GPG_PASSPHRASE }}" | git tag -s "v${{ steps.version.outputs.version }}" -m "Release v${{ steps.version.outputs.version }}"
+          git tag -a "v${{ steps.version.outputs.version }}" -m "Release v${{ steps.version.outputs.version }}"
           echo "Pushing tag to origin..."
           git push origin "v${{ steps.version.outputs.version }}" 
           echo "Verifying tag was pushed:"
@@ -83,8 +76,3 @@ jobs:
             dist/*.whl
             dist/*.tar.gz
           generate_release_notes: true
-
-      - name: Cleanup GPG keys
-        run: |
-          gpg --delete-secret-keys --batch --yes "${{ secrets.GPG_KEY_ID }}"
-          gpg --delete-keys --batch --yes "${{ secrets.GPG_KEY_ID }}"