feat!: convert to semantic-release with NPM trusted publishing (#257)

## Summary
- Migrate from manual versioning to automated releases using
semantic-release
- Configure NPM trusted publishing with OIDC for secure, tokenless npm
authentication
- Add release workflow with manual trigger (workflow_dispatch), test
matrix (Node 20, 22, 24), and provenance support
- Update dependabot to use conventional commit prefixes (`chore(deps)`)

## Changes
- **package.json**: Set version to `0.0.0-semantically-released`, add
repository field, publishConfig with public access and provenance, add
semantic-release devDependency
- **.releaserc.json**: Standard configuration with commit-analyzer,
release-notes-generator, npm, and github plugins
- **.github/workflows/release.yml**: Manual release workflow with OIDC
permissions for NPM trusted publishing
- **.github/dependabot.yml**: Add `chore(deps)` prefix for conventional
commits

## Test plan
- [ ] Verify build workflow passes on this PR
- [ ] After merge, configure NPM trusted publishing for the package on
npmjs.com
- [ ] Manually trigger the release workflow to publish v1.0.0

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.5 <[email protected]>

Closes #255
Closes #256

BREAKING CHANGE: This migrates from manual versioning to automated
releases using semantic-release with NPM's OIDC-based trusted publishing.

Author: chrisrohr

.github/dependabot.yml

@@ -4,6 +4,8 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+    commit-message:
+      prefix: "chore(deps)"
     groups:
       dev-deps:
         dependency-type: "development"
@@ -23,6 +25,8 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+    commit-message:
+      prefix: "chore(deps)"
     groups:
       actions-deps:
         patterns:

.github/workflows/release.yml

@@ -0,0 +1,62 @@
+name: release
+
+on:
+  workflow_dispatch:
+
+jobs:
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        node_version: ['20', '22', '24']
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup Node ${{ matrix.node_version }}
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node_version }}
+          cache: 'npm'
+
+      - name: Install Dependencies
+        run: npm ci
+
+      - name: Build
+        run: npm run build
+
+  release:
+    name: Release
+    needs: test
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
+      id-token: write
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+          cache: 'npm'
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Install Dependencies
+        run: npm ci
+
+      - name: Build
+        run: npm run build
+
+      - name: Release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
+        run: npx semantic-release

.releaserc.json

@@ -0,0 +1,9 @@
+{
+  "branches": ["main"],
+  "plugins": [
+    "@semantic-release/commit-analyzer",
+    "@semantic-release/release-notes-generator",
+    "@semantic-release/npm",
+    "@semantic-release/github"
+  ]
+}

package.json

@@ -1,8 +1,16 @@
 {
   "name": "@kiwiproject/vue-dynamic-property-provider",
-  "version": "0.13.0",
+  "version": "0.0.0-semantically-released",
   "private": false,
   "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/kiwiproject/vue-dynamic-property-provider.git"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
   "files": [
     "dist"
   ],
@@ -26,6 +34,7 @@
     "vue": "^3.5.26"
   },
   "devDependencies": {
+    "semantic-release": "^24.2.4",
     "@tailwindcss/vite": "4.1.18",
     "@vitejs/plugin-vue": "^6.0.3",
     "@vue/tsconfig": "0.8.1",