build: migrate Changesets CLI 3 and Action v2 atomically (#474)

* build(deps-dev): bump @changesets/cli from 2.31.1 to 3.0.1

Bumps [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) from 2.31.1 to 3.0.1.
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@3.0.1/packages/cli)

---
updated-dependencies:
- dependency-name: "@changesets/cli"
  dependency-version: 3.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* ci: migrate release workflow to Changesets Action v2

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brian Love <brian@liveloveapp.com>

Author: dependabot[bot]

.github/workflows/release.yml

@@ -82,27 +82,26 @@ jobs:
 
       - name: Version PR or publish
         id: changesets
-        uses: changesets/action@v1
+        uses: changesets/action@v2
         with:
-          version: pnpm exec changeset version
-          publish: node ./scripts/publish-configured-packages.mjs
-          title: "chore: version packages"
-          commit: "chore: version packages"
-        env:
-          GITHUB_TOKEN: ${{ env.RELEASE_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
-          # No NODE_AUTH_TOKEN. Publishing is OIDC-only: any token in the
-          # environment makes npm use token auth and skip the trusted-publishing
-          # exchange, which also means no provenance attestation. A package
-          # without a trusted publisher must fail loudly here rather than fall
-          # back to a token — see the preflight guard above.
+          version-script: pnpm exec changeset version
+          publish-script: node ./scripts/publish-configured-packages.mjs
+          pr-title: "chore: version packages"
+          commit-message: "chore: version packages"
+          github-token: ${{ env.RELEASE_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
+        # No NODE_AUTH_TOKEN. Publishing is OIDC-only: any token in the
+        # environment makes npm use token auth and skip the trusted-publishing
+        # exchange, which also means no provenance attestation. A package
+        # without a trusted publisher must fail loudly here rather than fall
+        # back to a token — see the preflight guard above.
 
       - name: Enable auto-merge on Version PR
-        if: steps.changesets.outputs.pullRequestNumber != '' && env.RELEASE_GITHUB_TOKEN != ''
+        if: steps.changesets.outputs.pr-number != '' && env.RELEASE_GITHUB_TOKEN != ''
         env:
           GH_TOKEN: ${{ env.RELEASE_GITHUB_TOKEN }}
         run: |
           gh pr merge \
             --auto \
             --squash \
             --repo ${{ github.repository }} \
-            ${{ steps.changesets.outputs.pullRequestNumber }}
+            ${{ steps.changesets.outputs.pr-number }}

package.json

@@ -43,7 +43,7 @@
   },
   "devDependencies": {
     "@arethetypeswrong/cli": "^0.18.5",
-    "@changesets/cli": "^2.31.1",
+    "@changesets/cli": "^3.0.1",
     "@eslint/js": "^10.0.1",
     "@microsoft/api-extractor": "^7.59.0",
     "@microsoft/tsdoc": "^0.16.0",