ci: preparation for major releases [AR-55136] (#315)

Author: StyleShit

.github/workflows/changeset.yml

@@ -11,6 +11,7 @@ on:
       - synchronize
     branches:
       - main
+      - next
 
 permissions: {}
 
@@ -45,7 +46,7 @@ jobs:
       # Returns exit code 1 when there are changes without changesets attached to them.
       # See: https://github.com/changesets/changesets/blob/main/docs/automating-changesets.md#blocking
       - name: Run Changesets
-        run: pnpm changeset status --since origin/main
+        run: pnpm changeset status --since origin/${{ github.event.pull_request.base.ref }}
 
   disallow-major-release:
     name: Disallow Major Release
@@ -54,8 +55,10 @@ jobs:
     permissions:
       contents: read
 
-    # Skip release & dependabot PRs
+    # Block major releases only on main, allow on next.
+    # Skip release & dependabot PRs.
     if: |
+      github.event.pull_request.base.ref == 'main' &&
       ! (github.event.pull_request.title == 'chore(release): publish' && github.event.pull_request.user.login == 'github-actions[bot]') &&
       ! (github.event.pull_request.user.login == 'dependabot[bot]')
 

.github/workflows/security.yml

@@ -2,7 +2,7 @@ name: Security
 
 on:
   pull_request:
-    branches: ['main']
+    branches: ['main', 'next']
 
   schedule:
     - cron: '0 0 * * 6'