ci: set permissions

Signed-off-by: Joshua Chapman <joshua.chapman@secomind.com>

Author: joshuachp

.github/workflows/publish.yaml

@@ -12,6 +12,7 @@ on:
 # Only needs to clone the repository
 permissions:
   contents: write
+  id-token: write
 # Safer shell
 defaults:
   run:

CHANGELOG.md

@@ -11,7 +11,7 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
+## [0.10.0] - 2025-10-17
 
 ### Added
 

scripts/github-release.sh

@@ -24,9 +24,9 @@ else
 fi
 
 if [[ -n ${GITHUB_REPO:-} ]]; then
-    changelog=$(git cliff --strip all --unreleased --tag="$TAG" --github-repo="$GITHUB_REPO")
+    changelog=$(git cliff --strip all --tag="$TAG" --github-repo="$GITHUB_REPO")
 else
-    changelog=$(git cliff --strip all --unreleased --tag="$TAG")
+    changelog=$(git cliff --strip all --tag="$TAG")
 fi
 
 notes="### CHANGELOG