ci: update release workflow, not auto publish yet

Author: dy0gu

.github/dependabot.yml

@@ -0,0 +1,17 @@
+version: 2
+enable-beta-ecosystems: true
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    commit-message:
+      prefix: "chore"
+      include: "scope"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    commit-message:
+      prefix: "chore"
+      include: "scope"

.github/workflows/lint.yaml

@@ -16,15 +16,15 @@ permissions:
   pull-requests: write
 
 jobs:
-  check:
+  source:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493 # v5.0.0
         with:
           fetch-depth: 0
           persist-credentials: false
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@cd2651c46231bc0d6f48d6b34433b845331235fe # v5.0.0
         with:
           node-version-file: "package.json"
           cache: "npm"

.github/workflows/semantic.release.yaml

@@ -1,7 +1,6 @@
 name: "semantic / release"
 
 on:
-  workflow_dispatch:
   push:
     branches: [main]
 
@@ -19,26 +18,13 @@ jobs:
     uses: ./.github/workflows/lint.yaml
   test:
     uses: ./.github/workflows/test.yml
-  release:
+  please:
+    needs: [lint, test]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      # Build and upload to stores still needs to be done manually for now
+      - uses: googleapis/release-please-action@1155c2c8dcbd6b15e85bae6bc6d1fed9552663cb # v4.2.0
+        id: release
         with:
-          fetch-depth: 0
-          persist-credentials: false
-
-      - uses: actions/setup-node@v4
-        with:
-          node-version-file: "package.json"
-          cache: "npm"
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Build extension
-        run: npm run build
-
-      - name: Trigger release
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: npx semantic-release
+          config-file: release.json
+          manifest-file: .release-manifest.json

.github/workflows/semantic.merge.yaml …ithub/workflows/semantic.validation.yaml.github/workflows/semantic.merge.yaml renamed to .github/workflows/semantic.validation.yaml .github/workflows/semantic.merge.yaml renamed to .github/workflows/semantic.validation.yaml

@@ -1,5 +1,4 @@
-# https://www.conventionalcommits.org/en/v1.0.0
-name: "semantic / merge"
+name: "semantic / validation"
 
 on:
   pull_request_target:
@@ -11,11 +10,12 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  title:
+  # PRs should be written according to https://www.conventionalcommits.org/en/v1.0.0
+  pull-request-title:
     runs-on: ubuntu-latest
     permissions:
       pull-requests: read
     steps:
-      - uses: amannn/action-semantic-pull-request@v5
+      - uses: amannn/action-semantic-pull-request@335288255954904a41ddda8947c8f2c844b8bfeb # v5.5.3
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/test.yml

@@ -15,9 +15,9 @@ jobs:
     timeout-minutes: 30
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493 # v5.0.0
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@cd2651c46231bc0d6f48d6b34433b845331235fe # v5.0.0
         with:
           node-version-file: "package.json"
           cache: "npm"
@@ -32,7 +32,7 @@ jobs:
         run: npm run test
 
       - name: Upload report
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@de65e23aa2b7e23d713bb51fbfcb6d502f8667d8 # v.4.6.2
         if: always()
         with:
           name: test-report

.release-manifest.json

@@ -0,0 +1,3 @@
+{
+	".": "1.0.1"
+}

.releaserc.jsonc

@@ -1,6 +1,5 @@
 {
-	"name": "jsc-unlocker",
-	"version": "1.0.2",
+	"version": "1.0.1",
 	"private": true,
 	"engines": {
 		"node": ">=22.0.0"
@@ -17,11 +16,7 @@
 	"devDependencies": {
 		"@biomejs/biome": "2.2.4",
 		"@playwright/test": "1.55.0",
-		"@semantic-release/changelog": "6.0.3",
-		"@semantic-release/git": "10.0.1",
-		"@semantic-release/github": "11.0.6",
 		"lefthook": "1.13.0",
-		"semantic-release": "24.2.8",
 		"typescript": "5.9.2",
 		"wxt": "0.20.11"
 	}

package.json

@@ -0,0 +1,17 @@
+{
+	"$schema": "https://raw.githubusercontent.com/googleapis/release-please/main/schemas/config.json",
+	"release-type": "node",
+	"separate-pull-requests": true,
+	"always-update": true,
+	"sequential-calls": true,
+	"release-search-depth": 500,
+	"commit-search-depth": 1000,
+	"plugins": [
+		{
+			"type": "sentence-case"
+		}
+	],
+	"packages": {
+		".": {}
+	}
+}