fix(ci): remove release commit to avoid unsigned commits

[skevetter]

Summary

• Removes @semantic-release/git and @semantic-release/changelog plugins that were causing unsigned commits on protected branches
• Deletes CHANGELOG.md — release notes now live exclusively in GitHub Releases
• Simplifies the semantic-release workflow by removing git identity config and persist-credentials

Per the semantic-release FAQ, making commits during release adds significant complexity including branch protection bypass requirements.

Summary by CodeRabbit

• Chores
  • Updated release automation workflow to use GitHub App token authentication.
  • Modified release configuration settings for plugin handling.
  • Reorganized build tool dependencies in project manifest.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: b4ac65cc-b66e-4222-9f70-d059418cdf78

📥 Commits

Reviewing files that changed from the base of the PR and between 3de1827 and 25ded57.

📒 Files selected for processing (4)

• .github/workflows/semantic-release.yml
• .releaserc.json
• CHANGELOG.md
• package.json

---

📝 Walkthrough

Walkthrough

The semantic-release workflow and configuration are modernized to use GitHub App token authentication instead of manually configured git credentials, and the release plugin chain is simplified by removing the changelog and git plugins while disabling success/failure comments in the GitHub plugin.

Changes

Semantic-release configuration modernization

Layer / File(s)	Summary
GitHub App token authentication .github/workflows/semantic-release.yml	The workflow now uses actions/create-github-app-token to obtain a token and passes it to actions/checkout@v6 via the token parameter. The persist-credentials option and the manual git user configuration step are removed, shifting authentication from manual credentials to GitHub App token.
Release plugin configuration .releaserc.json	The plugins array is updated to remove @semantic-release/changelog and @semantic-release/git configurations and reconfigure @semantic-release/github with successComment: false and failTitle: false, simplifying the release plugin chain.

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

• devsy-org/devsy#375: Reintroduces the @semantic-release/changelog and @semantic-release/git plugins that this PR removes, and restores the git identity configuration and credential persistence in the workflow.
• devsy-org/devsy#374: Initial semantic-release setup that established the same workflow, .releaserc.json, and package dependencies that this PR is modernizing.

Suggested labels

size/l

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[netlify]

✅ Deploy Preview for devsydev canceled.

Name	Link
🔨 Latest commit	25ded57
🔍 Latest deploy log	https://app.netlify.com/projects/devsydev/deploys/6a0c68a21505140008cbec04