feat(release): add GitHub Actions workflow for automated releases

.changeset/clever-hairs-hope.md

@@ -0,0 +1,19 @@
+---
+'@lit-protocol/access-control-conditions': patch
+'@lit-protocol/access-control-conditions-schemas': patch
+'@lit-protocol/auth': patch
+'@lit-protocol/auth-helpers': patch
+'@lit-protocol/auth-services': patch
+'@lit-protocol/constants': patch
+'@lit-protocol/crypto': patch
+'@lit-protocol/lit-client': patch
+'@lit-protocol/logger': patch
+'@lit-protocol/networks': patch
+'@lit-protocol/schemas': patch
+'@lit-protocol/types': patch
+'@lit-protocol/wasm': patch
+'@lit-protocol/wrapped-keys': patch
+'@lit-protocol/wrapped-keys-lit-actions': patch
+---
+
+reset naga-dev contract addresses and add naga-staging network

.changeset/cute-bottles-ask.md

@@ -12,8 +12,6 @@
 '@lit-protocol/schemas': major
 '@lit-protocol/types': major
 '@lit-protocol/wasm': major
-'@lit-protocol/wrapped-keys': major
-'@lit-protocol/wrapped-keys-lit-actions': major
 ---
 
 first naga beta release

.changeset/cute-experts-clap.md

@@ -12,8 +12,6 @@
 '@lit-protocol/schemas': patch
 '@lit-protocol/types': patch
 '@lit-protocol/wasm': patch
-'@lit-protocol/wrapped-keys': patch
-'@lit-protocol/wrapped-keys-lit-actions': patch
 ---
 
 Initial version after networks unification

.changeset/cyan-bears-invent.md

@@ -12,8 +12,6 @@
 '@lit-protocol/schemas': patch
 '@lit-protocol/types': patch
 '@lit-protocol/wasm': patch
-'@lit-protocol/wrapped-keys': patch
-'@lit-protocol/wrapped-keys-lit-actions': patch
 ---
 
 Initial release for networks unification

.github/workflows/prerelease.yml

@@ -0,0 +1,83 @@
+name: Prerelease Snapshot
+
+on:
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  publish:
+    name: Publish prerelease snapshot
+    runs-on: ubuntu-latest
+    env:
+      RELEASE_BRANCH_PREFIX: 'changeset-release/'
+    steps:
+      - name: Ensure Changesets release branch
+        run: |
+          if [[ "${GITHUB_REF_NAME}" != ${RELEASE_BRANCH_PREFIX}* ]]; then
+            echo "❌ This workflow must be triggered on a Changesets release branch. Current branch: ${GITHUB_REF_NAME}"
+            echo "👉 From the release PR, choose \"Run workflow\" and keep the default branch (changeset-release/...)."
+            exit 1
+          fi
+
+      - name: Check NPM Token
+        run: |
+          if [ -z "${{ secrets.NODE_AUTH_TOKEN }}" ]; then
+            echo "❌ NODE_AUTH_TOKEN secret is not set. Please add it to repository secrets."
+            exit 1
+          else
+            echo "✅ NODE_AUTH_TOKEN secret is available."
+          fi
+
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Configure git user
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
+        with:
+          bun-version: latest
+
+      - name: Install rust
+        uses: dtolnay/[email protected]
+
+      - name: Install wasm-pack
+        uses: jetli/[email protected]
+        with:
+          version: 'latest'
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22.18.0'
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Install project dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Apply snapshot versions
+        run: bunx changeset version --snapshot beta
+
+      - name: Build workspace
+        env:
+          NX_DAEMON: 'false'
+        run: bun run build
+
+      - name: Publish prerelease packages
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NODE_AUTH_TOKEN }}
+        run: bunx changeset publish --tag beta
+
+      - name: Reset working tree
+        if: always()
+        run: |
+          git reset --hard HEAD
+          git clean -fd

.github/workflows/release.yml

@@ -0,0 +1,92 @@
+name: Release
+on:
+  push:
+    branches:
+      - naga
+      - canary-naga
+
+permissions:
+  # allow pushing commits, creating tags, and modifying repo files
+  # needed for the workflow to update package.json versions and CHANGELOG files
+  contents: write
+  pull-requests: write
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check NPM Token
+        run: |
+          if [ -z "${{ secrets.NODE_AUTH_TOKEN }}" ]; then
+            echo "❌ NODE_AUTH_TOKEN secret is not set. Please add it to repository secrets."
+            exit 1
+          else
+            echo "✅ NODE_AUTH_TOKEN secret is available."
+          fi
+
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      # Enable this after PNPM migration
+      # - name: Setup PNPM
+      #   uses: pnpm/action-setup@v4
+      #   with:
+      #     version: 9.15.0
+
+      # TODO: Disable this after PNPM migration
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v1
+        with:
+          bun-version: latest
+
+      - name: Install rust
+        uses: dtolnay/[email protected]
+
+      - name: Install wasm-pack
+        uses: jetli/[email protected]
+        with:
+          version: 'latest'
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22.18.0'
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Install project dependencies
+        run: bun install --frozen-lockfile
+        # Enable this after PNPM migration
+        # run: pnpm install --frozen-lockfile
+
+      - name: Check current pre-release mode
+        run: |
+          if [ -f ".changeset/pre.json" ]; then
+            echo "📋 Current pre-release mode status:"
+            cat .changeset/pre.json | jq '{ mode: .mode, tag: .tag }'
+          else
+            echo "📋 Not in pre-release mode"
+          fi
+
+      - name: Build
+        env:
+          NX_DAEMON: 'false'
+        run: bun run build
+        # Enable this after pnpm migration
+        # run: pnpm build
+
+      - name: Create Release Pull Request or Publish to npm
+        id: changesets
+        uses: changesets/action@v1
+        with:
+          version: bunx changeset version
+          publish: bunx changeset publish --access public
+          # Enable this after pnpm migration
+          # version: pnpm changeset version
+          # publish: pnpm changeset publish --access public
+          commit: 'chore(release): version packages'
+          title: 'chore(release): version packages'
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.NODE_AUTH_TOKEN }}