ci(release): migrate to Craft reusable workflow (#148)

* ci(release): migrate to Craft reusable workflow

Switch from action-prepare-release to the Craft reusable workflow,
which is simpler and handles authentication/checkout internally.

- Version input is now optional, defaults to 'auto' (inferred from commits)
- Uses secrets: inherit to pass required credentials

See https://craft.sentry.dev/github-actions/ for documentation.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* chore: bump craft minVersion to 2.20.1

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: add empty permissions block to satisfy CodeQL

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

Author: vaind

.craft.yml

@@ -1,4 +1,4 @@
-minVersion: 0.23.1
+minVersion: 2.20.1
 changelogPolicy: auto
 preReleaseCommand: pwsh -cwa ''
 artifactProvider:

.github/workflows/release.yml

@@ -1,39 +1,22 @@
 name: Release
 
 permissions:
-  contents: read
+  contents: write
 
 on:
   workflow_dispatch:
     inputs:
       version:
-        description: Version to release
-        required: true
+        description: 'Version to release (automatically inferred form commits if not provided)'
+        required: false
       force:
         description: Force a release even when there are release-blockers (optional)
         required: false
 
 jobs:
   release:
-    runs-on: ubuntu-latest
-    name: "Release a new version"
-    steps:
-      - name: Get auth token
-        id: token
-        uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1.11.0
-        with:
-          app-id: ${{ vars.SENTRY_RELEASE_BOT_CLIENT_ID }}
-          private-key: ${{ secrets.SENTRY_RELEASE_BOT_PRIVATE_KEY }}
-
-      - uses: actions/checkout@v4
-        with:
-          token: ${{ steps.token.outputs.token }}
-          fetch-depth: 0
-
-      - name: Prepare release
-        uses: getsentry/action-prepare-release@v1
-        env:
-          GITHUB_TOKEN: ${{ steps.token.outputs.token }}
-        with:
-          version: ${{ github.event.inputs.version }}
-          force: ${{ github.event.inputs.force }}
+    uses: getsentry/craft/.github/workflows/release.yml@v2
+    with:
+      version: ${{ inputs.version || 'auto' }}
+      force: ${{ inputs.force || 'false' }}
+    secrets: inherit