chore: Fix using github token for github changelog plugin

[Luca Forstner (lforst)]

• One step is calling the changesets GitHub changelog plugin and that requires the github token.
• The changeset action interpreted the && weridly and actually wants a script
• The changeset-required job needs to rerun when a tag is added and removed

Failure run: https://github.com/braintrustdata/braintrust-sdk-javascript/actions/runs/24437145174

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	next@​15.5.15 ⏵ 14.2.34	+20	-30	+4	-46
	@​ai-sdk/​openai@​3.0.53 ⏵ 2.0.53	-28		-3
	@​opentelemetry/​exporter-trace-otlp-http@​0.53.0 ⏵ 0.200.0				+1
	openai@​5.23.2
	@​vercel/​otel@​0.1.0
	cohere-ai@​7.21.0
	cohere-ai@​8.0.0
	@​types/​react-dom@​18.3.7
	@​braintrust/​otel@​0.1.2
	@​opentelemetry/​sdk-trace-base@​1.26.0 ⏵ 2.0.0	+1			+1
	@​types/​node@​20.19.39 ⏵ 20.19.37
	cohere-ai@​7.20.0
	tsup@​8.5.1
	tsup@​8.3.5
	react@​19.2.5 ⏵ 18.3.1			+1
	@​opentelemetry/​otlp-exporter-base@​0.53.0 ⏵ 0.35.0	+1			-3
	@​opentelemetry/​otlp-transformer@​0.53.0 ⏵ 0.35.0	+1		-3	-3
	@​vercel/​otel@​2.1.0
	@​opentelemetry/​context-async-hooks@​1.26.0 ⏵ 1.9.0	+27		+1	-5
	@​opentelemetry/​sdk-trace-base@​1.26.0 ⏵ 1.9.0	+22			-4
	ai@​6.0.161 ⏵ 5.0.76	-10
	vite-tsconfig-paths@​4.3.2
	typescript@​5.9.3
	typescript@​5.4.4
	braintrust@​2.2.2 ⏵ 2.2.1-rc.0	+1
	@​opentelemetry/​exporter-trace-otlp-http@​0.53.0 ⏵ 0.35.0	+26			-3
	react-dom@​19.2.5 ⏵ 18.3.1	-7
	cohere-ai@​7.14.0
	@​opentelemetry/​core@​1.26.0 ⏵ 2.0.0				+1
	@​opentelemetry/​core@​1.26.0 ⏵ 1.9.0				+1
	@​opentelemetry/​sdk-node@​0.53.0 ⏵ 0.35.0	+1
	@​mistralai/​mistralai@​1.3.4
See 5 more rows in the dashboard

View full report