chore: update update-common workflow

- Add npm audit fix step after installing doc-detective-common
- Modify version bumping logic to sync with doc-detective-common version
- Enhance release creation with detailed notes and merged PRs
- Install GitHub CLI for fetching PRs and release notes

Author: hawkeyexl

.github/workflows/update-common.yml

@@ -40,6 +40,7 @@ jobs:
           echo "Failed to install doc-detective-common@${{ steps.version.outputs.version }}"
           exit 1
         }
+        npm audit fix
     
     - name: Test the installation
       run: |
@@ -58,24 +59,88 @@ jobs:
           echo "has_changes=true" >> $GITHUB_OUTPUT
         fi
 
-    - name: Bump patch version
+    - name: Bump or sync version
       id: patch
       if: steps.commit.outputs.has_changes == 'true'
       run: |
         git checkout -- .
         git clean -fd
-        npm version patch
+        # Get current project version
+        PROJ_VERSION=$(node -p "require('./package.json').version")
+        # Get doc-detective-common version (strip ^ or ~)
+        COMMON_VERSION=$(node -p "(require('./package.json').dependencies['doc-detective-common'] || require('./package.json').devDependencies['doc-detective-common'] || '').replace(/^[^\\d]*/, '')")
+        # Parse versions
+        PROJ_MAJOR=$(echo $PROJ_VERSION | cut -d. -f1)
+        PROJ_MINOR=$(echo $PROJ_VERSION | cut -d. -f2)
+        COMMON_MAJOR=$(echo $COMMON_VERSION | cut -d. -f1)
+        COMMON_MINOR=$(echo $COMMON_VERSION | cut -d. -f2)
+        if [ "$PROJ_MAJOR" != "$COMMON_MAJOR" ] || [ "$PROJ_MINOR" != "$COMMON_MINOR" ]; then
+          # Major or minor mismatch: set version to match doc-detective-common major.minor.0
+          NEW_VERSION="$COMMON_MAJOR.$COMMON_MINOR.0"
+          npm version --no-git-tag-version "$NEW_VERSION"
+        else
+          # Only patch changed: bump patch
+          npm version patch --no-git-tag-version
+        fi
+        git add package.json package-lock.json
+        git commit -m "bump version to match doc-detective-common"
         git push
+        git tag "v$(node -p \"require('./package.json').version\")"
         git push --tags
-        echo "version=$(node -p "require('./package.json').version")" >> $GITHUB_OUTPUT
+        echo "version=$(node -p \"require('./package.json').version\")" >> $GITHUB_OUTPUT
 
     - name: Create release
+      if: steps.commit.outputs.has_changes == 'true'
+      # Install GitHub CLI for fetching PRs and release notes
+      run: |
+        sudo apt-get update && sudo apt-get install -y gh jq
+
+    - name: Gather merged PRs since last release
+      id: merged_prs
+      run: |
+        # Get previous tag (before the new one)
+        PREV_TAG=$(git tag --sort=-creatordate | grep -v "v${{ steps.patch.outputs.version }}" | head -n1)
+        CURR_TAG="v${{ steps.patch.outputs.version }}"
+        echo "Previous tag: $PREV_TAG, Current tag: $CURR_TAG"
+        if [ -z "$PREV_TAG" ]; then
+          echo "No previous tag found. Skipping PR list."
+          echo "prs=No previous release found." >> $GITHUB_OUTPUT
+        else
+          PRS=$(gh pr list --state merged --search "merged:>=$(git log -1 --format=%aI $PREV_TAG)" --json number,title,url --jq '.[] | "- [#\(.number)](\(.url)): \(.title)"')
+          if [ -z "$PRS" ]; then
+            PRS=""
+          fi
+          echo "prs<<EOF" >> $GITHUB_OUTPUT
+          echo "$PRS" >> $GITHUB_OUTPUT
+          echo "EOF" >> $GITHUB_OUTPUT
+        fi
+
+    - name: Fetch doc-detective-common release notes
+      id: common_release
+      run: |
+        COMMON_VERSION=${{ steps.version.outputs.version }}
+        # Remove ^ or ~ if present
+        COMMON_VERSION_CLEAN=$(echo "$COMMON_VERSION" | sed 's/^[^0-9]*//')
+        # Query GitHub API for release notes
+        RELEASE_INFO=$(gh release view "v$COMMON_VERSION_CLEAN" --repo doc-detective/doc-detective-common --json body --jq .body || echo "No release notes found.")
+        echo "release_notes<<EOF" >> $GITHUB_OUTPUT
+        echo "$RELEASE_INFO" >> $GITHUB_OUTPUT
+        echo "EOF" >> $GITHUB_OUTPUT
+
+    - name: Create release with detailed notes
       if: steps.commit.outputs.has_changes == 'true'
       uses: softprops/action-gh-release@v2
       with:
-        body: "Updated doc-detective-common to v${{ steps.patch.outputs.version }}."
+        body: |
+          # What's new
+
+          - Updated doc-detective-common to v${{ steps.patch.outputs.version }}:
+
+            ${{ steps.common_release.outputs.release_notes }}
+
+          ${{ steps.merged_prs.outputs.prs }}
         tag_name: "v${{ steps.patch.outputs.version }}"
         name: "v${{ steps.patch.outputs.version }}"
-        generate_release_notes: true
+        generate_release_notes: false
         token: ${{ secrets.DD_DEP_UPDATE_TOKEN }}