chore: release-plz fix (#8)

* chore: release-plz fix

* chore: moving dependabot file

Author: Krahos

.github/workflows/dependabot.yml .github/dependabot.yml.github/workflows/dependabot.yml renamed to .github/dependabot.yml

@@ -22,6 +22,7 @@ jobs:
         uses: actions/checkout@v6
         with:
           fetch-depth: 0
+          persist-credentials: false
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@stable
       - uses: Swatinem/rust-cache@v2
@@ -31,3 +32,30 @@ jobs:
           command: release-pr
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  # Create a GitHub release after the release PR is merged.
+  release-plz-release:
+    name: Release-plz Release
+    runs-on: ubuntu-latest
+    if: ${{ github.repository_owner == 'Shuftle' }}
+    permissions:
+      contents: write
+      pull-requests: read
+    concurrency:
+      group: release-plz-release-${{ github.ref }}
+      cancel-in-progress: false
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+      - uses: Swatinem/rust-cache@v2
+      - name: Run release-plz
+        uses: release-plz/action@v0.5
+        with:
+          command: release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release-plz.yml

@@ -27,7 +27,7 @@ jobs:
     steps:
       - uses: olegtarasov/get-tag@v2.1.2
         id: get_version
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           lfs: ${{ env.use_git_lfs }}
       - uses: Swatinem/rust-cache@v2