Updated gh-workflow-tailcall generated ci file

.github/workflows/ci.yml

@@ -19,7 +19,7 @@ name: Build and Test
 env:
   RUSTFLAGS: -Dwarnings
 on:
-  pull_request_target:
+  pull_request:
     types:
     - opened
     - synchronize
@@ -33,6 +33,8 @@ jobs:
   build:
     name: Build and Test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
     - name: Checkout Code
       uses: actions/checkout@v4
@@ -48,7 +50,9 @@ jobs:
     - name: Cargo Clippy
       run: cargo +nightly clippy --all-features --workspace -- -D warnings
   release:
-    needs: build
+    needs:
+    - build
+    if: ${{ github.ref == 'refs/heads/main' && github.event_name == 'push' }}
     name: Release
     runs-on: ubuntu-latest
     permissions:
@@ -62,4 +66,29 @@ jobs:
     - name: Checkout Code
       uses: actions/checkout@v4
     - name: Release Plz
-      uses: MarcoIeni/[email protected]
+      uses: release-plz/[email protected]
+      with:
+        command: release
+  release-pr:
+    needs:
+    - build
+    if: ${{ github.ref == 'refs/heads/main' && github.event_name == 'push' }}
+    name: Release PR
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+      packages: write
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
+    steps:
+    - name: Checkout Code
+      uses: actions/checkout@v4
+    - name: Release Plz
+      uses: release-plz/[email protected]
+      with:
+        command: release-pr
+    concurrency:
+      group: release-${{github.ref}}
+      cancel-in-progress: false