Our release process relies on Goreleaser for automatically building provider binaries for all architectures, signing them and generating a Github release with the binaries attached.
Once the maintainers are ready to publish a new version, they can create a new git tag starting with v* and following semver. Pushing this tag will trigger a Github action that runs goreleaser.
They will find a new release with the appropriate version, changelog and attached artifacts on github, that was automatically marked as latest.