That's interesting. Instead of step 7. we have a separate release CI job which when is a one click, test build tag release.

This outputs artifacts to a sonatype nexus repo. From there, the binary can be promoted either automatically or manually to various environments.

It breaks Gitlabs rules of CI modifying the repo (with no explanation) but it allows any developer with any level of experience to easily release the product