From 8952d5d7bf1bf6d3d7918e28bb2f3beacf876f7c Mon Sep 17 00:00:00 2001
From: Szymon Chmal <szymon@chmal.it>
Date: Wed, 1 Apr 2026 18:04:44 +0200
Subject: [PATCH 1/2] ci: tweak release workflow

---
 .github/workflows/release.yml |  1 +
 RELEASING.md                  |  4 ++--
 scripts/release/release.mjs   | 18 ++++++++++++------
 3 files changed, 15 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 78ad32c0..ed8b01ae 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -31,6 +31,7 @@ jobs:
     env:
       RELEASE_MODE: ${{ github.event.inputs.mode }}
       RELEASE_REF: ${{ github.event.inputs.ref }}
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       GIT_AUTHOR_NAME: actions-bot
       GIT_AUTHOR_EMAIL: actions-bot@users.noreply.github.com
     steps:
diff --git a/RELEASING.md b/RELEASING.md
index 323eec94..a5e569bf 100644
--- a/RELEASING.md
+++ b/RELEASING.md
@@ -37,9 +37,9 @@ Prereleases also run manually with `.github/workflows/release.yml`.
 
 ### RC releases
 
-Use `release/<minor>` or `release/<version>` branches, for example `release/1.7` or `release/2.0`.
+Use `release/v<version>` branches, for example `release/v1.7` or `release/v2.0.0`.
 
-`rc` mode is intentionally restricted to `release/*` branches and will fail on `main`.
+`rc` mode is intentionally restricted to `release/v<version>` branches and will fail on `main`.
 
 First `rc` run on a release branch:
 
diff --git a/scripts/release/release.mjs b/scripts/release/release.mjs
index eaee34a2..78688994 100644
--- a/scripts/release/release.mjs
+++ b/scripts/release/release.mjs
@@ -25,6 +25,10 @@ function normalizeRef(ref) {
   return ref.replace(/^refs\/heads\//, '').trim();
 }
 
+function isReleaseBranch(ref) {
+  return /^release\/v\d+\.\d+(?:\.\d+)?$/.test(ref);
+}
+
 function run(command, args, options = {}) {
   execFileSync(command, args, {
     stdio: 'inherit',
@@ -92,7 +96,7 @@ function updateLockfile() {
   run('pnpm', ['install', '--lockfile-only']);
 }
 
-function commitVersionChanges(message) {
+function commitVersionChanges() {
   run('git', [
     'add',
     '.changeset',
@@ -108,7 +112,7 @@ function commitVersionChanges(message) {
     fail('no release files were staged for commit');
   }
 
-  run('git', ['commit', '-m', message]);
+  run('git', ['commit', '-m', `chore: release v${readVersion()}`]);
 }
 
 function pushBranch() {
@@ -166,7 +170,7 @@ function runStableRelease() {
 
   run('pnpm', ['changeset', 'version']);
   updateLockfile();
-  commitVersionChanges('Version packages for stable release');
+  commitVersionChanges();
   pushBranch();
   run('pnpm', ['release:check']);
   run('pnpm', ['release:build']);
@@ -179,8 +183,10 @@ function runRcRelease() {
     fail(`rc releases must not run from ${stableBranch}`);
   }
 
-  if (!branch.startsWith('release/')) {
-    fail(`rc releases must run from a release/* branch, received ${branch}`);
+  if (!isReleaseBranch(branch)) {
+    fail(
+      `rc releases must run from a release/v<version> branch, received ${branch}`,
+    );
   }
 
   ensureRemoteBranch();
@@ -192,7 +198,7 @@ function runRcRelease() {
 
   run('pnpm', ['changeset', 'version']);
   updateLockfile();
-  commitVersionChanges('Version packages for rc release');
+  commitVersionChanges();
   pushBranch();
   run('pnpm', ['release:check']);
   run('pnpm', ['release:build']);

From 0ae5ee9d6c3e6fb01aab6f38e007439dfb512213 Mon Sep 17 00:00:00 2001
From: Szymon Chmal <szymon@chmal.it>
Date: Thu, 2 Apr 2026 12:41:08 +0200
Subject: [PATCH 2/2] ci: use workflow ref for releases

---
 .github/workflows/release.yml | 9 ++-------
 1 file changed, 2 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ed8b01ae..0a94f9c7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -11,17 +11,13 @@ on:
           - stable
           - rc
           - canary
-      ref:
-        description: Git ref to checkout
-        required: true
-        type: string
 
 permissions:
   contents: write
   id-token: write
 
 concurrency:
-  group: release-${{ github.event.inputs.mode }}-${{ github.event.inputs.ref }}
+  group: release-${{ github.event.inputs.mode }}-${{ github.ref_name }}
   cancel-in-progress: true
 
 jobs:
@@ -30,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     env:
       RELEASE_MODE: ${{ github.event.inputs.mode }}
-      RELEASE_REF: ${{ github.event.inputs.ref }}
+      RELEASE_REF: ${{ github.ref_name }}
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       GIT_AUTHOR_NAME: actions-bot
       GIT_AUTHOR_EMAIL: actions-bot@users.noreply.github.com
@@ -38,7 +34,6 @@ jobs:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
-          ref: ${{ github.event.inputs.ref }}
           fetch-depth: 0
 
       - name: Configure git identity