fixup! ci: add semantic-versioning release to GH action

Author: dhensby

.github/workflows/tests.yml

@@ -87,13 +87,13 @@ jobs:
       id-token: write # to enable use of OIDC for npm provenance
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
           cache: 'npm'
       - name: Install dependencies
         run: npm clean-install
@@ -102,6 +102,8 @@ jobs:
       - name: Release
         env:
           NPM_CONFIG_PROVENANCE: true
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          # Prefer a dedicated PAT (e.g. to push the release commit/tag to the
+          # protected `master` branch); fall back to the built-in token otherwise.
+          GITHUB_TOKEN: ${{ secrets.RELEASE_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
         run: npx semantic-release
 

release.config.mjs

@@ -1,8 +1,7 @@
 export default {
-  preset: 'conventionalcommits',
   plugins: [
-    '@semantic-release/commit-analyzer',
-    '@semantic-release/release-notes-generator',
+    ['@semantic-release/commit-analyzer', { preset: 'conventionalcommits' }],
+    ['@semantic-release/release-notes-generator', { preset: 'conventionalcommits' }],
     ['@semantic-release/changelog', { changelogTitle: '# Changelog' }],
     '@semantic-release/npm',
     '@semantic-release/github',