Improve release workflow.

Three related fixes:

1. Regenerate schema artifacts when bumping version.
   runtime_metadata.yaml embeds the EG version, so it must be
   regenerated during version bump.

2. Trigger CI on release PRs via workflow_dispatch.
   PRs created by GITHUB_TOKEN don't trigger pull_request workflows
   (GitHub prevents infinite loops). Now we explicitly trigger CI
   so release PRs get the required status check.

3. Disable commit signing so tagged commit lands in main.
   create-pull-request with sign-commits: true recreates commits
   via GitHub API with new SHAs, orphaning the tagged commit.

Co-Authored-By: Claude <noreply@anthropic.com>

Author: myronmarston

.github/workflows/ci.yaml

@@ -7,6 +7,10 @@ on:
     branches:
       - main
   pull_request:
+  # Allows triggering CI manually or from other workflows. Used by the release workflow
+  # to trigger CI on release PRs, since PRs created by GITHUB_TOKEN don't automatically
+  # trigger the `pull_request` event (GitHub prevents this to avoid infinite loops).
+  workflow_dispatch:
 
 env:
   # It's recommended to run ElasticGraph with this option to get better performance. We want to run

.github/workflows/release.yaml

@@ -102,7 +102,7 @@ jobs:
       - name: Create pull request for the version bump
         uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0
         with:
-          sign-commits: true
+          sign-commits: false
           branch: release-v${{ inputs.version }}
           title: "Release v${{ inputs.version }}"
           body: |
@@ -115,6 +115,14 @@ jobs:
             - [ ] Confirm this version bump should be merged into [${{ github.ref_name }}](https://github.com/${{ github.repository }}/tree/${{ github.ref_name }}) or change the base branch
             - [ ] Review and edit the [GitHub Draft Release](https://github.com/${{ github.repository }}/releases) (can be done after this PR is merged)
 
+      # PRs created using GITHUB_TOKEN don't trigger `pull_request` workflows (GitHub prevents
+      # this to avoid infinite loops). We explicitly trigger CI here so that the release PR
+      # gets the required `All CI Checks Passed` status check for branch protection.
+      - name: Trigger CI on release branch
+        run: gh workflow run ci.yaml --ref release-v${{ inputs.version }}
+        env:
+          GH_TOKEN: ${{ github.token }}
+
       - name: Create GitHub Release
         uses: ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b # v1.20.0
         with:

config/release/Rakefile

@@ -29,10 +29,12 @@ bump_version = lambda do |version:, message:|
 
     ::Gem::Release::Cmds::Runner.new(:bump, ["elasticgraph-support"], opts).run
 
-    # We also want to commit an update to `Gemfile.lock` as part of the version bump.
+    # We also want to commit updates to `Gemfile.lock` and schema artifacts as part of the version bump.
+    # Schema artifacts must be regenerated because `runtime_metadata.yaml` embeds the ElasticGraph version.
     ::Bundler.with_unbundled_env do
       sh "bundle install"
-      sh "git add Gemfile.lock"
+      sh "bundle exec rake schema_artifacts:dump"
+      sh "git add Gemfile.lock config/schema/artifacts/ config/schema/artifacts_with_apollo/"
       sh "git commit --amend --no-edit"
     end
   end