Improve release notes validation and CI extraction

Changes:
- dump-version.sh: validate Added/Changed/Fixed have content, error if empty
- publish-packages.yml: extract versioned [X.Y.Z] section first, fix fallback regex
- Update gopher-orch submodule to main branch
- Add release notes for upcoming changes in CHANGELOG.md

Author: RahulHere

.github/workflows/publish-packages.yml

@@ -251,27 +251,37 @@ jobs:
           echo "" >> RELEASE_NOTES.md
 
           if [ -f "CHANGELOG.md" ]; then
-            # Extract content from [Unreleased] section (between ## [Unreleased] and next ## [)
-            sed -n '/^## \[Unreleased\]/,/^## \[/p' CHANGELOG.md | \
+            # First try: extract the current version's section [X.Y.Z] or [X.Y.Z.A]
+            # (dump-version.sh converts [Unreleased] to [X.Y.Z] before push)
+            ESCAPED_VERSION=$(echo "$VERSION" | sed 's/\./\\./g')
+            sed -n "/^## \[${ESCAPED_VERSION}\]/,/^## \[/p" CHANGELOG.md | \
               grep -v "^## \[" | \
               sed '/^$/d' >> RELEASE_NOTES.md || true
 
-            # If Unreleased section is empty, try to get the latest version section
-            if [ ! -s RELEASE_NOTES.md ] || [ $(wc -l < RELEASE_NOTES.md) -le 10 ]; then
-              echo "" >> RELEASE_NOTES.md
-              # Get content from the first versioned section
-              sed -n '/^## \[0-9\]/,/^## \[/p' CHANGELOG.md | \
+            # Fallback: try [Unreleased] section if version section not found
+            if [ $(wc -l < RELEASE_NOTES.md) -le 10 ]; then
+              sed -n '/^## \[Unreleased\]/,/^## \[/p' CHANGELOG.md | \
+                grep -v "^## \[" | \
+                sed '/^$/d' >> RELEASE_NOTES.md || true
+            fi
+
+            # Final fallback: get the first versioned section
+            if [ $(wc -l < RELEASE_NOTES.md) -le 10 ]; then
+              sed -n '/^## \[[0-9]/,/^## \[/p' CHANGELOG.md | \
                 head -50 | \
                 grep -v "^## \[" >> RELEASE_NOTES.md || true
             fi
-          else
-            echo "No CHANGELOG.md found, listing recent commits..." >> RELEASE_NOTES.md
+          fi
+
+          # If still empty, list recent commits
+          if [ $(wc -l < RELEASE_NOTES.md) -le 10 ]; then
+            echo "### Changed" >> RELEASE_NOTES.md
             echo "" >> RELEASE_NOTES.md
-            git log --pretty=format:"* %s (%h)" --no-merges -20 >> RELEASE_NOTES.md || true
+            git log --pretty=format:"- %s" --no-merges -20 >> RELEASE_NOTES.md || true
           fi
 
           # Add full changelog link
-          PREV_TAG=$(git tag --sort=-creatordate | grep -v "^${VERSION_TAG}$" | head -1)
+          PREV_TAG=$(git tag --sort=-creatordate | grep -E "^v[0-9]" | grep -v "^${VERSION_TAG}$" | head -1)
           if [ -n "$PREV_TAG" ]; then
             echo "" >> RELEASE_NOTES.md
             echo "**Full Changelog**: https://github.com/${{ github.repository }}/compare/${PREV_TAG}...${VERSION_TAG}" >> RELEASE_NOTES.md

.gitmodules

@@ -1,4 +1,4 @@
 [submodule "third_party/gopher-orch"]
 	path = third_party/gopher-orch
 	url = https://github.com/GopherSecurity/gopher-orch.git
-	branch = gateway-img-with-auth
+	branch = main

CHANGELOG.md

@@ -8,6 +8,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- Add empty release notes validation in dump-version.sh — errors out if all Added/Changed/Fixed sections are empty
+
+### Changed
+
+- Improve CI release notes extraction in publish-packages.yml: try versioned section `[X.Y.Z]` first, then `[Unreleased]`, with proper fallbacks and commit listing as final fallback
+- Update gopher-orch submodule to `main` branch
+
+### Fixed
+
+- Fix CI release notes showing empty What's Changed section (workflow extracted empty `[Unreleased]` instead of versioned `[X.Y.Z]` section)
+- Fix release notes fallback regex for extracting versioned sections from CHANGELOG.md
 
 ## [0.1.14] - 2026-04-21
 

dump-version.sh

@@ -160,16 +160,36 @@ fi
 UNRELEASED_CONTENT=$(sed -n '/^## \[Unreleased\]/,/^## \[/p' "$CHANGELOG_FILE" | \
     grep -v "^## \[" | grep -v "^$" | head -20)
 
-if [ -z "$UNRELEASED_CONTENT" ]; then
-    echo -e "${YELLOW}Warning: [Unreleased] section in CHANGELOG.md appears empty${NC}"
-    echo "You may want to add release notes before continuing."
-    read -p "Continue anyway? (y/N) " -n 1 -r
-    echo
-    if [[ ! $REPLY =~ ^[Yy]$ ]]; then
-        exit 1
-    fi
+# Check that at least one of Added/Changed/Fixed has actual content (not just headers)
+HAS_ADDED=$(sed -n '/^## \[Unreleased\]/,/^## \[/p' "$CHANGELOG_FILE" | \
+    sed -n '/^### Added/,/^### /p' | grep -v "^### " | grep -v "^$" | head -1)
+HAS_CHANGED=$(sed -n '/^## \[Unreleased\]/,/^## \[/p' "$CHANGELOG_FILE" | \
+    sed -n '/^### Changed/,/^### /p' | grep -v "^### " | grep -v "^$" | head -1)
+HAS_FIXED=$(sed -n '/^## \[Unreleased\]/,/^## \[/p' "$CHANGELOG_FILE" | \
+    sed -n '/^### Fixed/,/^### /p' | grep -v "^### " | grep -v "^$" | head -1)
+
+if [ -z "$HAS_ADDED" ] && [ -z "$HAS_CHANGED" ] && [ -z "$HAS_FIXED" ]; then
+    echo -e "${RED}========================================${NC}"
+    echo -e "${RED}  Error: Empty release notes!${NC}"
+    echo -e "${RED}========================================${NC}"
+    echo ""
+    echo -e "The [Unreleased] section in CHANGELOG.md has no content under"
+    echo -e "Added, Changed, or Fixed. At least one section must have entries."
+    echo ""
+    echo "To fix this, edit CHANGELOG.md and add release notes under [Unreleased]:"
+    echo "  ## [Unreleased]"
+    echo "  ### Added"
+    echo "  - New feature description"
+    echo "  ### Changed"
+    echo "  - Change description"
+    echo "  ### Fixed"
+    echo "  - Bug fix description"
+    exit 1
 else
     echo -e "  ${GREEN}[Unreleased] section has content${NC}"
+    [ -n "$HAS_ADDED" ] && echo -e "    Added:   ${GREEN}yes${NC}" || echo -e "    Added:   ${YELLOW}empty${NC}"
+    [ -n "$HAS_CHANGED" ] && echo -e "    Changed: ${GREEN}yes${NC}" || echo -e "    Changed: ${YELLOW}empty${NC}"
+    [ -n "$HAS_FIXED" ] && echo -e "    Fixed:   ${GREEN}yes${NC}" || echo -e "    Fixed:   ${YELLOW}empty${NC}"
     echo "  Preview:"
     echo "$UNRELEASED_CONTENT" | head -5 | sed 's/^/    /'
 fi