Add PyPI release workflow and bump version to 1.21.3

- New GitHub Actions workflow builds sdist/wheel on semver tags and
  publishes via PyPI trusted publishing (pypi environment).
- CHANGELOG and version for 1.21.3 (Java annotation arguments fix, #463).

Made-with: Cursor

Author: terryyin

.github/workflows/release.yml

@@ -0,0 +1,57 @@
+# Publish to PyPI when a version tag is pushed (e.g. 1.21.3).
+#
+# One-time PyPI setup (trusted publishing, recommended):
+# https://docs.pypi.org/trusted-publishers/adding-a-publisher/
+#   - PyPI → lizard → Manage → Publishing → Add a new pending publisher
+#   - Owner/repo: this repository, Workflow: release.yml, Environment: pypi
+# Create a GitHub "pypi" environment (Settings → Environments) if you use the
+# environment name below; optional approval rules are supported there.
+#
+# Fallback: store PYPI_API_TOKEN in repo secrets and add to the publish job:
+#   with:
+#     password: ${{ secrets.PYPI_API_TOKEN }}
+
+name: Release — publish to PyPI
+
+on:
+  push:
+    tags:
+      - '[0-9]*.[0-9]*.[0-9]*'
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.11'
+
+      - name: Install build tooling
+        run: pip install --upgrade pip build
+
+      - name: Build sdist and wheel
+        run: python -m build
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: python-package-distributions
+          path: dist/
+
+  publish:
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/lizard/
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: python-package-distributions
+          path: dist/
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1

CHANGELOG.md

@@ -2,6 +2,11 @@
 
 ## Unreleased
 
+## 1.21.3
+
+### Bug Fixes
+- Fix Java annotations with parenthesized arguments (e.g. `@Transactional(rollbackFor = Exception.class)`) being parsed as methods and corrupting complexity (issue #463)
+
 ## 1.21.2
 
 ### Bug Fixes

lizard_ext/version.py

@@ -3,4 +3,4 @@
 #
 # pylint: disable=missing-docstring,invalid-name
 
-version = "1.21.2"
+version = "1.21.3"