add commit signing in release action [no ci]

Author: YaroShkvorets

.github/workflows/release.yml

@@ -26,6 +26,18 @@ jobs:
           packageManager: pnpm
           packageManagerVersion: 9
 
+      - name: Import bot's GPG key for signing commits
+        id: import-gpg
+        uses: crazy-max/ghaction-import-gpg@v4
+        with:
+          gpg_private_key: ${{ secrets.PINAX_BOT_PGP_PRIVATE_KEY }}
+          passphrase: ${{ secrets.PINAX_BOT_PGP_PASSPHRASE }}
+          git_committer_name: pinax-bot
+          git_committer_email: [email protected]
+          git_config_global: true
+          git_user_signingkey: true
+          git_commit_gpgsign: true
+
       - name: Set variables
         id: vars
         run: |
@@ -45,8 +57,9 @@ jobs:
           commit: ${{ env.RELEASE_COMMIT_MSG }}
           title: Upcoming Release Changes
           createGithubReleases: true
+          setupGitUser: false
           githubReleaseName: ${{ steps.vars.outputs.date }}
           githubReleaseAssets: packages/cli/dist/*.tar.gz
         env:
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.PINAX_BOT_GITHUB_TOKEN }}