ci: add release-please for automated releases (#73)

* ci: add release-please for automated releases

Add a release-please workflow to automate versioning, changelog
generation, and npm publishing on merge to main, mirroring the setup
in authkit-tanstack-start (#64).

- Add release-please-config.json and .release-please-manifest.json
  (seeded at the current v0.11.0)
- Update release.yml to use the workflow_call trigger (invoked by
  release-please) instead of release: [published], and collapse the
  prerelease/release publish steps into a single publish step

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* ci: lint PR titles with conventional commits

Add a Lint PR Title workflow using action-semantic-pull-request so PR
titles follow the Conventional Commits format that release-please relies
on for versioning and changelog generation. Mirrors authkit-nextjs.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* Bump version from 0.11.0 to 0.12.0

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: gjtorikian

.github/workflows/lint-pr-title.yml

@@ -0,0 +1,16 @@
+name: Lint PR Title
+
+on:
+  pull_request_target:
+    types: [opened, edited, synchronize]
+
+permissions:
+  pull-requests: read
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release-please.yml

@@ -0,0 +1,34 @@
+name: Release Please
+
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: write
+  pull-requests: write
+  id-token: write
+
+jobs:
+  release-please:
+    runs-on: ubuntu-latest
+    outputs:
+      release_created: ${{ steps.release.outputs.release_created }}
+    steps:
+      - name: Generate token
+        id: generate-token
+        uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 # v2
+        with:
+          app-id: ${{ vars.SDK_BOT_APP_ID }}
+          private-key: ${{ secrets.SDK_BOT_PRIVATE_KEY }}
+
+      - uses: googleapis/release-please-action@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 # v4
+        id: release
+        with:
+          token: ${{ steps.generate-token.outputs.token }}
+
+  publish:
+    needs: release-please
+    if: ${{ needs.release-please.outputs.release_created == 'true' }}
+    uses: ./.github/workflows/release.yml

.github/workflows/release.yml

@@ -3,9 +3,8 @@ name: Release
 on:
   # Support manually pushing a new release
   workflow_dispatch: {}
-  # Trigger when a release is published
-  release:
-    types: [published]
+  # Invoked by the release-please workflow when a release is created
+  workflow_call: {}
 
 defaults:
   run:
@@ -35,12 +34,6 @@ jobs:
         run: |
           npm run build
 
-      - name: Push Release
-        if: ${{ !github.event.release.prerelease }}
+      - name: Publish
         run: |
           npm publish --tag latest --access=public --provenance
-
-      - name: Push Pre-Release
-        if: ${{ github.event.release.prerelease }}
-        run: |
-          npm publish --tag next --access=public --provenance

.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.12.0"
+}

release-please-config.json

@@ -0,0 +1,12 @@
+{
+  "$schema": "https://raw.githubusercontent.com/googleapis/release-please/main/schemas/config.json",
+  "include-component-in-tag": false,
+  "packages": {
+    ".": {
+      "release-type": "node",
+      "changelog-path": "CHANGELOG.md",
+      "versioning": "default",
+      "bump-minor-pre-major": true
+    }
+  }
+}