fix: release workflow - add current option and use PAT for branch protection

Author: dorlugasigal

.github/workflows/release.yml

@@ -4,10 +4,11 @@ on:
   workflow_dispatch:
     inputs:
       bump:
-        description: 'Version bump type'
+        description: 'Version bump type (use "current" to publish as-is)'
         required: true
         type: choice
         options:
+          - current
           - patch
           - minor
           - major
@@ -24,7 +25,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.RELEASE_PAT }}
 
       - uses: actions/setup-node@v4
         with:
@@ -40,32 +41,34 @@ jobs:
           git config user.name "github-actions[bot]"
           git config user.email "github-actions[bot]@users.noreply.github.com"
 
-      - name: Bump version
+      - name: Determine version
         id: bump
         run: |
           OLD_VERSION=$(node -p "require('./package.json').version")
-          npm version ${{ inputs.bump }} --no-git-tag-version
-          NEW_VERSION=$(node -p "require('./package.json').version")
+          if [ "${{ inputs.bump }}" = "current" ]; then
+            NEW_VERSION="${OLD_VERSION}"
+            echo "Publishing current version ${NEW_VERSION}"
+          else
+            npm version ${{ inputs.bump }} --no-git-tag-version
+            NEW_VERSION=$(node -p "require('./package.json').version")
+            echo "Bumped ${OLD_VERSION} → ${NEW_VERSION} (${{ inputs.bump }})"
+          fi
           echo "old_version=${OLD_VERSION}" >> $GITHUB_OUTPUT
           echo "new_version=${NEW_VERSION}" >> $GITHUB_OUTPUT
-          echo "Bumped ${OLD_VERSION} → ${NEW_VERSION} (${{ inputs.bump }})"
+          echo "is_bump=${{ inputs.bump != 'current' }}" >> $GITHUB_OUTPUT
 
       - name: Update CHANGELOG
+        if: inputs.bump != 'current'
         run: |
           NEW_VERSION=${{ steps.bump.outputs.new_version }}
           DATE=$(date +%Y-%m-%d)
-          # Get commits since last tag
           LAST_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
           if [ -n "$LAST_TAG" ]; then
             COMMITS=$(git log ${LAST_TAG}..HEAD --pretty=format:"- %s" --no-merges)
           else
             COMMITS=$(git log --pretty=format:"- %s" --no-merges)
           fi
-
-          # Build new changelog entry
           ENTRY="## [${NEW_VERSION}] - ${DATE}\n\n${COMMITS}\n"
-
-          # Insert after the first line (# Changelog header)
           if [ -f CHANGELOG.md ]; then
             sed -i "0,/^## /s//$(printf '%s\n\n' "${ENTRY}")## /" CHANGELOG.md 2>/dev/null || \
             awk -v entry="$ENTRY" 'NR==1{print; print ""; print entry; next}1' CHANGELOG.md > CHANGELOG.tmp && mv CHANGELOG.tmp CHANGELOG.md
@@ -74,8 +77,12 @@ jobs:
       - name: Commit, tag & push
         run: |
           NEW_VERSION=${{ steps.bump.outputs.new_version }}
-          git add package.json package-lock.json CHANGELOG.md
-          git commit -m "chore(release): v${NEW_VERSION}"
+          git add -A
+          if git diff --cached --quiet; then
+            echo "No changes to commit"
+          else
+            git commit -m "chore(release): v${NEW_VERSION}"
+          fi
           git tag -a "v${NEW_VERSION}" -m "Release v${NEW_VERSION}"
           git push origin main --follow-tags