feat: convert to reusable workflow

Author: Timo Notheisen

.github/workflows/automatic-dependency-release.yml

@@ -0,0 +1,34 @@
+name: Automatic Dependency Release
+
+on:
+  workflow_call:
+    inputs:
+      branch:
+        description: Branch to inspect and release from.
+        required: false
+        type: string
+        default: main
+    secrets:
+      github-token:
+        description: Token used to read commits and create the release.
+        required: true
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          repository: js-soft/github-actions
+          ref: main
+          token: ${{ secrets.github-token }}
+
+      - uses: actions/setup-node@v6
+        with:
+          node-version: current
+
+      - run: npm ci
+      - run: npm run prepare-dependency-release
+        env:
+          GITHUB_TOKEN: ${{ secrets.github-token }}
+          RELEASE_BRANCH: ${{ inputs.branch }}

.github/workflows/test.yml

@@ -13,5 +13,3 @@ jobs:
           node-version: current
       - run: npm ci
       - run: npm run lint
-      - run: npm run build
-      - run: git diff --exit-code

.gitignore

@@ -1,4 +1,3 @@
 node_modules
 dist
-!prepare-weekly-dependency-release/dist
-!prepare-weekly-dependency-release/dist/**
+**/dist

README.md

@@ -2,25 +2,26 @@
 
 Reusable GitHub Actions for js-soft repositories.
 
-## prepare-weekly-dependency-release
+## automatic-dependency-release
 
-Checks whether all commits on a branch since the latest GitHub release were authored by Renovate or Dependabot. If no latest GitHub release exists, it checks all commits on the branch instead. If all checked commits are dependency-bot commits, it outputs the next patch tag for a dependency-only release.
+Checks whether all commits on a branch since the latest GitHub release were authored by Renovate or Dependabot. If no latest GitHub release exists, it checks all commits on the branch instead. If all checked commits are dependency-bot commits, it creates a GitHub release with generated release notes.
 
 ```yaml
-- name: Check dependency-only changes
-  id: prepare
-  uses: js-soft/github-actions/prepare-weekly-dependency-release@main
-  with:
-      github-token: ${{ github.token }}
-      branch: main
+jobs:
+    release:
+        uses: js-soft/github-actions/.github/workflows/automatic-dependency-release.yml@main
+        with:
+            branch: main
+        secrets:
+            github-token: ${{ secrets.GH_PAT }}
 ```
 
-Outputs:
+The first release is created as `0.1.0`. Later releases increment the latest release's patch version.
 
-- `should_release`: `true` when a new release should be created.
-- `next_tag`: the next patch tag to release. If there is no latest GitHub release, this is `0.1.0`.
+Secrets:
+
+- `github-token`: token used to read commits and create the release. Use a PAT when the created release should trigger follow-up workflows.
 
 Inputs:
 
-- `github-token`: token used to read releases, compare commits, and inspect tags.
-- `branch`: branch to inspect. Defaults to `main`.
+- `branch`: branch to inspect and release from. Defaults to `main`.