diff --git a/.github/release.yml b/.github/release.yml
new file mode 100644
index 00000000..3646e69d
--- /dev/null
+++ b/.github/release.yml
@@ -0,0 +1,30 @@
+# https://docs.github.com/en/repositories/releasing-projects-on-github/automatically-generated-release-notes
+changelog:
+  exclude:
+    labels:
+      - ignore-for-release-note
+  categories:
+    - title: Breaking Changes
+      labels:
+        - breaking-change
+    - title: New Features
+      labels:
+        - feature
+    - title: Enhancements
+      labels:
+        - enhancement
+    - title: Dependency and image updates
+      labels:
+        - dependencies
+    - title: Bug fixes
+      labels:
+        - bugfix
+    - title: Documentation
+      labels:
+        - documentation
+    - title: Testing
+      labels:
+        - testing
+    - title: Other Changes
+      labels:
+        - "*"
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
new file mode 100644
index 00000000..8268d69d
--- /dev/null
+++ b/.github/workflows/release.yaml
@@ -0,0 +1,21 @@
+name: Release
+
+on:
+  push:
+    tags: ["[0-9]+.[0-9]+.[0-9]+*"]
+
+permissions:
+  contents: read
+
+jobs:
+  artifacts:
+    name: Artifacts
+    uses: ./.github/workflows/artifacts.yaml
+    with:
+      publish: true
+      release: true
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
+      security-events: write