Release: develop → main

.github/dependabot.yml

@@ -0,0 +1,46 @@
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+    labels:
+      - "dependencies"
+      - "security"
+
+  - package-ecosystem: "npm"
+    directory: "/apps/web"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+    labels:
+      - "dependencies"
+      - "security"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/core"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+    labels:
+      - "dependencies"
+      - "security"
+
+  - package-ecosystem: "npm"
+    directory: "/packages/db"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+    labels:
+      - "dependencies"
+      - "security"
+
+  - package-ecosystem: "npm"
+    directory: "/apps/worker"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+    labels:
+      - "dependencies"
+      - "security"

.github/workflows/codeql.yml

@@ -0,0 +1,42 @@
+name: CodeQL
+
+on:
+  push:
+    branches:
+      - main
+      - develop
+  pull_request:
+    branches:
+      - main
+      - develop
+  schedule:
+    - cron: "0 6 * * 1"
+
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        language:
+          - javascript-typescript
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: ${{ matrix.language }}
+
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v3
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3

.github/workflows/release-pr.yml

@@ -106,9 +106,33 @@ jobs:
               --body-file "$BODY_FILE"
           else
             echo "Creating new release PR"
-            gh pr create \
-              --base main \
-              --head develop \
-              --title "$PR_TITLE" \
-              --body-file "$BODY_FILE"
+            set +e
+            CREATE_OUTPUT="$(
+              gh pr create \
+                --base main \
+                --head develop \
+                --title "$PR_TITLE" \
+                --body-file "$BODY_FILE" 2>&1
+            )"
+            CREATE_EXIT=$?
+            set -e
+
+            if [ "$CREATE_EXIT" -eq 0 ]; then
+              echo "$CREATE_OUTPUT"
+              exit 0
+            fi
+
+            if echo "$CREATE_OUTPUT" | grep -q "No commits between main and develop"; then
+              echo "No commits between main and develop. Skipping PR creation."
+              exit 0
+            fi
+
+            if echo "$CREATE_OUTPUT" | grep -q "Resource not accessible by integration"; then
+              echo "::warning::Unable to create release PR with GitHub Actions token. Add RELEASE_PR_TOKEN secret (PAT with repo scope) to enable automatic creation."
+              echo "$CREATE_OUTPUT"
+              exit 0
+            fi
+
+            echo "$CREATE_OUTPUT"
+            exit "$CREATE_EXIT"
           fi

.release-please-manifest.develop.json

@@ -1,5 +1,5 @@
 {
-  ".": "0.1.0-alpha.22",
+  ".": "0.1.0-alpha.23",
   "apps/web": "0.1.0-alpha.21",
   "apps/worker": "0.1.0-alpha.3"
 }

CHANGELOG-DEVELOP.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.1.0-alpha.23](https://github.com/devakone/vibe-coding-profiler/compare/vibe-coding-profiler-v0.1.0-alpha.22...vibe-coding-profiler-v0.1.0-alpha.23) (2026-02-15)
+
+
+### Bug Fixes
+
+* **ci:** handle release PR create permission fallback ([310e6ec](https://github.com/devakone/vibe-coding-profiler/commit/310e6ec23b0d34181a4a75c14dfb07625e6a8e43))
+
 ## [0.1.0-alpha.22](https://github.com/devakone/vibe-coding-profiler/compare/vibe-coding-profiler-v0.1.0-alpha.21...vibe-coding-profiler-v0.1.0-alpha.22) (2026-02-12)