fix(ci): trigger checks for version package PRs (#14)

## Summary
- add manual dispatch support to the CI workflow
- have the release workflow trigger CI on the `changeset-release/<base>`
branch after Changesets updates the version PR
- grant the release workflow the permissions needed to dispatch that run

## Testing
- yarn test
- yarn lint
work: amend version-pr check handling

Author: mgabor3141

.github/workflows/ci.yml

@@ -5,6 +5,7 @@ on:
     branches: [main]
   pull_request:
     branches: [main]
+  workflow_dispatch:
 
 jobs:
   check:

.github/workflows/release.yml

@@ -10,6 +10,7 @@ jobs:
   release:
     runs-on: ubuntu-latest
     permissions:
+      checks: write
       contents: write
       pull-requests: write
       id-token: write
@@ -27,9 +28,92 @@ jobs:
 
       - run: yarn build
 
-      - uses: changesets/action@v1
+      - id: changesets
+        uses: changesets/action@v1
         with:
           version: yarn ci:version
           publish: yarn ci:publish
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Load version PR metadata
+        if: steps.changesets.outputs.pullRequestNumber != ''
+        id: version_pr
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          pr_number='${{ steps.changesets.outputs.pullRequestNumber }}'
+          pr_json="$(gh api repos/${{ github.repository }}/pulls/$pr_number)"
+          merge_sha="$(printf '%s' "$pr_json" | jq -r '.merge_commit_sha')"
+
+          if [ -z "$merge_sha" ] || [ "$merge_sha" = "null" ]; then
+            echo "Version PR merge commit SHA is unavailable" >&2
+            exit 1
+          fi
+
+          echo "number=$pr_number" >> "$GITHUB_OUTPUT"
+          echo "merge_sha=$merge_sha" >> "$GITHUB_OUTPUT"
+
+      - name: Create version PR check run
+        if: steps.version_pr.outputs.merge_sha != ''
+        id: version_pr_check
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          payload="$(jq -n \
+            --arg name check \
+            --arg head_sha '${{ steps.version_pr.outputs.merge_sha }}' \
+            --arg status in_progress \
+            --arg started_at "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
+            --arg details_url '${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}' \
+            '{name: $name, head_sha: $head_sha, status: $status, started_at: $started_at, details_url: $details_url}')"
+          response="$(gh api repos/${{ github.repository }}/check-runs --input - <<<"$payload")"
+          echo "id=$(printf '%s' "$response" | jq -r '.id')" >> "$GITHUB_OUTPUT"
+
+      - name: Check out version PR merge ref
+        if: steps.version_pr.outputs.number != ''
+        uses: actions/checkout@v4
+        with:
+          ref: refs/pull/${{ steps.version_pr.outputs.number }}/merge
+
+      - name: Install dependencies for version PR validation
+        if: steps.version_pr.outputs.number != ''
+        run: yarn install --immutable
+
+      - name: Validate version PR merge
+        if: steps.version_pr.outputs.number != ''
+        id: validate_version_pr
+        continue-on-error: true
+        run: |
+          yarn lint
+          yarn build
+          yarn test
+
+      - name: Finalize version PR check run
+        if: always() && steps.version_pr_check.outputs.id != ''
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          conclusion=success
+          summary='Version PR checks passed on the pull request merge commit.'
+
+          if [ '${{ steps.validate_version_pr.outcome }}' != 'success' ]; then
+            conclusion=failure
+            summary='Version PR checks failed on the pull request merge commit. See this workflow run for details.'
+          fi
+
+          payload="$(jq -n \
+            --arg status completed \
+            --arg conclusion "$conclusion" \
+            --arg completed_at "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
+            --arg details_url '${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}' \
+            --arg title 'Version PR validation' \
+            --arg summary "$summary" \
+            '{status: $status, conclusion: $conclusion, completed_at: $completed_at, details_url: $details_url, output: {title: $title, summary: $summary}}')"
+          gh api repos/${{ github.repository }}/check-runs/${{ steps.version_pr_check.outputs.id }} \
+            -X PATCH \
+            --input - <<<"$payload"
+
+      - name: Fail workflow if version PR validation failed
+        if: steps.validate_version_pr.outcome == 'failure'
+        run: exit 1