chore(deps): upgrade Changesets to v3 (#291)

* chore(deps-dev): bump @changesets/cli

Bumps the turbo-changesets group with 1 update in the / directory: [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli).


Updates `@changesets/cli` from 2.31.1 to 3.0.1
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@3.0.1/packages/cli)

---
updated-dependencies:
- dependency-name: "@changesets/cli"
  dependency-version: 3.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: turbo-changesets
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(deps): complete Changesets v3 migration

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Florian <dev@fwcr.de>

Author: dependabot[bot]

.changeset/config.json

@@ -1,11 +1,15 @@
 {
-  "$schema": "https://unpkg.com/@changesets/config@3.1.4/schema.json",
+  "$schema": "https://unpkg.com/@changesets/config@4.0.0/schema.json",
   "changelog": "@changesets/cli/changelog",
   "commit": false,
   "fixed": [],
   "linked": [],
   "access": "restricted",
   "baseBranch": "main",
   "updateInternalDependencies": "patch",
+  "privatePackages": {
+    "version": true,
+    "tag": false
+  },
   "ignore": []
 }

.github/workflows/release.yml

@@ -34,9 +34,9 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
-          # changesets/action creates and pushes the version commit, so this is
-          # the one checkout that deliberately retains Git credentials.
-          persist-credentials: true
+          # changesets/action v2 pushes signed commits through the GitHub API;
+          # do not leave Git credentials available to later package scripts.
+          persist-credentials: false
 
       - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
 
@@ -49,16 +49,14 @@ jobs:
 
       # Opens / updates a "Version Packages" PR while there are unreleased
       # changesets. When that PR is merged, the action tags the release.
-      # Publishing to npm is intentionally disabled — uncomment `publish:`
+      # Publishing to npm is intentionally disabled — uncomment `publish-script:`
       # and add the NPM_TOKEN secret if/when packages are published.
       - name: Create release PR
-        uses: changesets/action@a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d # v1
+        uses: changesets/action@8488615a623b1b9c987934bb89eae8af6a946ac1 # v2.1.1
         with:
-          version: pnpm exec changeset version
-          commit: "chore: version packages"
-          title: "chore: version packages"
-          createGithubReleases: true
-          # publish: pnpm exec changeset publish
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          # NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          version-script: pnpm exec changeset version
+          commit-message: "chore: version packages"
+          pr-title: "chore: version packages"
+          create-github-releases: true
+          # publish-script: pnpm exec changeset publish

package.json

@@ -54,7 +54,7 @@
   },
   "devDependencies": {
     "@biomejs/biome": "^2.5.10",
-    "@changesets/cli": "^2.31.1",
+    "@changesets/cli": "^3.0.1",
     "@commitlint/cli": "^21.2.2",
     "@commitlint/config-conventional": "^21.2.2",
     "@vitest/coverage-v8": "^4.1.11",