Rewrite job for release attestation and upload

Author: macintoshplus

.github/workflows/release.yml

@@ -72,15 +72,24 @@ jobs:
       id-token: write
       attestations: write
     steps:
+      - uses: actions/download-artifact@v8
+        if: github.event_name != 'pull_request'
+        with:
+          merge-multiple: true
+
+      - name: Display structure of downloaded files
+        if: github.event_name != 'pull_request'
+        run: ls -R
+
       - name: Generate build provenance attestation
         if: github.event_name != 'pull_request'
         uses: actions/attest@v4
         with:
-          subject-path: 'artifacts/php*'
+          subject-path: 'php_rar-*.zip'
 
-      - name: Upload artifacts to the release
-        uses: php/php-windows-builder/release@v1
-        with:
-          release: ${{ github.ref_name }}
-          token: ${{ secrets.GITHUB_TOKEN }}
-          draft: 'true'
+      - name: Upload all artifacts
+        if: ${{ startsWith(github.ref, 'refs/tags') }}
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          gh release upload ${{ github.ref_name }} php_rar-*.zip --clobber  --repo php-win-ext/rar