diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f07bca8fc..b2d6f47fb 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -76,36 +76,7 @@ jobs:
           name: artifact
           path: dist/*.whl
 
-  release_upload:
-    name: Create Release and Upload Release Asset
-    runs-on: ubuntu-latest
-    if: github.event_name == 'push'
-    needs: [build_wheels, build_sdist]
-    steps:
-      - name: Create Release
-        id: create_release
-        uses: actions/create-release@v1
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        with:
-          tag_name: ${{ github.ref }}
-          release_name: Release ${{ github.ref }}
-          draft: false
-          prerelease: ${{ contains(github.ref, '.rc') || contains(github.ref, '.a') || contains(github.ref, '.b')}}
-      - uses: actions/download-artifact@v3
-        with:
-          name: artifact
-          path: dist
-      - name: Upload Release Asset
-        id: upload-release-asset
-        uses: shogo82148/actions-upload-release-asset@v1
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        with:
-          upload_url: ${{ steps.create_release.outputs.upload_url }}
-          asset_path: dist/*
-
-  upload_pypi:
+  publish:
     if: github.event_name == 'push'
     needs: [build_wheels, build_sdist]
     runs-on: ubuntu-latest
@@ -121,3 +92,44 @@ jobs:
           password: ${{ secrets.pypi_password }}
           # To test:
           # repository_url: https://test.pypi.org/legacy/
+
+  github-release:
+    name: >-
+      Sign the Python 🐍 distribution 📦 with Sigstore
+      and create a GitHub Release
+    runs-on: ubuntu-latest
+    needs:
+    - publish
+
+    permissions:
+      contents: write
+      id-token: write
+
+    steps:
+    - name: Download all the dists
+      uses: actions/download-artifact@v3
+      with:
+        name: python-package-distributions
+        path: dist/
+    - name: Sign the dists with Sigstore
+      uses: sigstore/gh-action-sigstore-python@v1.2.3
+      with:
+        password: ${{ secrets.pypi_password }}
+        inputs: >-
+          ./dist/*.tar.gz
+          ./dist/*.whl
+    - name: Create GitHub Release
+      env:
+        GITHUB_TOKEN: ${{ github.token }}
+      run: >-
+        gh release create
+        '${{ github.ref_name }}'
+        --repo '${{ github.repository }}'
+        --generate-notes
+    - name: Upload artifact signatures to GitHub Release
+      env:
+        GITHUB_TOKEN: ${{ github.token }}
+      run: >-
+        gh release upload
+        '${{ github.ref_name }}' dist/**
+        --repo '${{ github.repository }}'
diff --git a/.gitignore b/.gitignore
index ba4ce947a..87856a902 100644
--- a/.gitignore
+++ b/.gitignore
@@ -20,6 +20,7 @@
 /.eggs
 /.cache
 
+.dmypy.json
 .gitignore~
 *.orig
 
diff --git a/README.rst b/README.rst
index 4d03c141c..7c049ab06 100644
--- a/README.rst
+++ b/README.rst
@@ -1,14 +1,11 @@
 Welcome to Enaml
 ================
 
-.. image:: https://travis-ci.org/nucleic/enaml.svg?branch=main
-    :target: https://travis-ci.org/nucleic/enaml
-    :alt: Build Status
+.. image:: https://github.com/nucleic/enaml/workflows/Continuous%20Integration/badge.svg
+    :target: https://github.com/nucleic/enaml/actions
 .. image:: https://ci.appveyor.com/api/projects/status/p2bapt3y6n7xixcl?svg=true
     :target: https://ci.appveyor.com/project/nucleic/enaml
     :alt: Appveyor Build Status
-.. image:: https://github.com/nucleic/enaml/workflows/Continuous%20Integration/badge.svg
-    :target: https://github.com/nucleic/enaml/actions
 .. image:: https://codecov.io/gh/nucleic/enaml/branch/main/graph/badge.svg
     :target: https://codecov.io/gh/nucleic/enaml
     :alt: Code Coverage Status
diff --git a/releasenotes.rst b/releasenotes.rst
index d6b65484d..2120ad306 100644
--- a/releasenotes.rst
+++ b/releasenotes.rst
@@ -3,14 +3,14 @@ Enaml Release Notes
 
 Dates are written as DD/MM/YYYY
 
-0.17.0 - unreleased
+0.17.0 - 20/11/2023
 -------------------
 - support for Python 3.12 PR #535
   Python 3.12 is only tested with Qt6
   All syntactic features of Python 3.12 are supported and catching error groups
   is now supported.
-- fix bug in Enaml parser that was not showing proper location of syntax and
-  indentation errors in tracebacks when the error was in an Enaml file.
+- fix a bug in Enaml parser that was not showing proper location of syntax and
+  indentation errors in tracebacks when the error was in an Enaml file. PR #530
 
 0.16.1 - 05/05/2023
 -------------------