ci: regenerate project layout

.github/dependabot.yml

@@ -12,46 +12,28 @@ updates:
     directory: /
     schedule:
       interval: weekly
-      day: wednesday
-      time: "12:00"
-      timezone: Etc/UTC
     groups:
-      all:
+      major/minor/patch:
         update-types:
+          - major
           - minor
           - patch
     commit-message:
       include: scope
-      prefix: chore
-    pull-request-branch-name:
-      separator: /
-    rebase-strategy: auto
-    target-branch: main
-    assignees:
-      - kilianpaquier
+      prefix: ci
     reviewers:
       - kilianpaquier
-
   - package-ecosystem: gomod
     directory: /
     schedule:
       interval: weekly
-      day: wednesday
-      time: "12:00"
-      timezone: Etc/UTC
     groups:
-      all:
+      minor/patch:
         update-types:
           - minor
           - patch
     commit-message:
       include: scope
-      prefix: chore
-    pull-request-branch-name:
-      separator: /
-    rebase-strategy: auto
-    target-branch: main
-    assignees:
-      - kilianpaquier
+      prefix: ci
     reviewers:
       - kilianpaquier

.github/workflows/integration.yml

@@ -18,7 +18,7 @@ on:
       - main
       - next
       - staging
-      - v[0-9]+
+      - v[0-9]+(.[0-9]+)?
   workflow_dispatch:
 
 jobs:

.github/workflows/release.yml

@@ -16,13 +16,20 @@ jobs:
   version:
     name: Version
     runs-on: ubuntu-latest
-    permissions:
-      contents: write
+    if: github.ref_protected == true
+    environment: release
     outputs:
       version: v${{ steps.semantic_release.outputs.new_release_version }}
       release: ${{ steps.release.outputs.release }}
+    env:
+      GIT_AUTHOR_NAME: ${{ github.triggering_actor }}
+      GIT_AUTHOR_EMAIL: ${{ github.triggering_actor }}@users.noreply.github.com
+      GIT_COMMITTER_NAME: ${{ github.triggering_actor }}
+      GIT_COMMITTER_EMAIL: ${{ github.triggering_actor }}@users.noreply.github.com
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - id: sha
         run: echo "sha=$(echo "$GITHUB_REF_NAME" | sha256sum | cut -c -8)" >> $GITHUB_OUTPUT
       # https://github.com/marketplace/actions/action-for-semantic-release
@@ -38,13 +45,12 @@ jobs:
             @semantic-release/release-notes-generator
             conventional-changelog-conventionalcommits
             semantic-release-license
-          ci: false
           dry_run: true
           tag_format: v${version}
           branches: |
             [
               "(master|main)",
-              "v+([0-9])",
+              "v+([0-9])?(.+([0-9]))",
               { "name": "next", "prerelease": true },
               { "name": "beta", "prerelease": true },
               { "name": "alpha", "prerelease": true },
@@ -53,7 +59,7 @@ jobs:
               { "name": "${{ github.ref_name }}", "prerelease": "${{ steps.sha.outputs.sha }}" }
             ]
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.RELEASE_TOKEN }}
       - run: echo $VERSION
         env:
           VERSION: v${{ steps.semantic_release.outputs.new_release_version }}
@@ -97,7 +103,7 @@ jobs:
           branches: |
             [
               "(master|main)",
-              "v+([0-9])",
+              "v+([0-9])?(.+([0-9]))",
               { "name": "next", "prerelease": true },
               { "name": "beta", "prerelease": true },
               { "name": "alpha", "prerelease": true },