From 6b3682cfb594d0fca3d40270c776fb5915a7929a Mon Sep 17 00:00:00 2001
From: Braden Simpson <727605+bradens@users.noreply.github.com>
Date: Thu, 25 Jun 2026 09:42:08 -0700
Subject: [PATCH] ci: cut GitHub Release in bump flow, not on every tag push

Move GitHub Release creation from release.yml to bump.yml so the
automatic (workflow_dispatch) flow gets a release, while manual
UI-created releases keep their hand-written notes.

- bump.yml: create release after tag push; capture tag from pnpm
  version output; add contents:write permission
- release.yml: drop release step (was clobbering UI-authored notes
  since it ran on every v* tag push)
---
 .github/workflows/bump.yml    | 11 ++++++++++-
 .github/workflows/release.yml |  6 +-----
 2 files changed, 11 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/bump.yml b/.github/workflows/bump.yml
index 105f1f5..ae0b72b 100644
--- a/.github/workflows/bump.yml
+++ b/.github/workflows/bump.yml
@@ -10,6 +10,8 @@ on:
 jobs:
   bump:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v4
         with:
@@ -24,6 +26,13 @@ jobs:
           git config user.name "github-actions[bot]"
           git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
       - name: Bump patch version and tag
-        run: 'pnpm version patch -m "chore(release): %s"'
+        id: bump
+        run: |
+          echo "tag=$(pnpm version patch -m 'chore(release): %s')" >> "$GITHUB_OUTPUT"
       - name: Push commit and tag
         run: git push --follow-tags
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ steps.bump.outputs.tag }}
+          generate_release_notes: true
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8d3f3fd..71fec2a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -22,8 +22,4 @@ jobs:
       - run: pnpm publish --access public --no-git-checks
         env:
           NODE_AUTH_TOKEN: ${{secrets.CODEX_SDK_NPM_TOKEN}}
-      - name: Create GitHub Release
-        uses: softprops/action-gh-release@v2
-        with:
-          tag_name: ${{ github.ref_name }}
-          generate_release_notes: true
+