fix: update major version tag as post-release step

Move major tag update (e.g. v6) into the release workflow as a
conditional step, gated on semantic-release actually publishing.
This avoids the GITHUB_TOKEN limitation where events from the
default token don't trigger separate workflows.

Also reverts @semantic-release/github from .releaserc since we no
longer rely on the release event to trigger a separate workflow.

.github/workflows/release.yml

@@ -28,6 +28,7 @@ jobs:
       - name: Run Tests
         run: npm test --if-present
       - name: Release
+        id: semantic
         uses: cycjimmy/semantic-release-action@v6
         with:
           semantic_version: 24
@@ -43,3 +44,11 @@ jobs:
           GIT_COMMITTER_NAME: github-actions
           GIT_COMMITTER_EMAIL: github-actions@github.com
           CI: true
+      - name: Update major version tag
+        if: steps.semantic.outputs.new_release_published == 'true'
+        run: |
+          MAJOR="v${{ steps.semantic.outputs.new_release_major_version }}"
+          TAG="v${{ steps.semantic.outputs.new_release_version }}"
+          echo "Updating $MAJOR tag to point to $TAG"
+          git tag -f "$MAJOR" "$TAG"
+          git push -f origin "$MAJOR"

.github/workflows/update-major-tag.yml

@@ -1,23 +0,0 @@
-name: Update major version tag
-
-on:
-  release:
-    types: [published]
-
-jobs:
-  update-tag:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-
-    steps:
-      - uses: actions/checkout@v6
-        with:
-          fetch-depth: 0
-      - name: Update major version tag
-        run: |
-          VERSION="${{ github.event.release.tag_name }}"
-          MAJOR="v$(echo "$VERSION" | sed 's/^v//' | cut -d. -f1)"
-          echo "Updating $MAJOR tag to point to $VERSION"
-          git tag -f "$MAJOR" "$VERSION"
-          git push -f origin "$MAJOR"

.releaserc

@@ -17,7 +17,6 @@
       {
         "assets": ["docs/CHANGELOG.md", "package.json"]
       }
-    ],
+    ]
-    "@semantic-release/github"
   ]
 }