fix(ci): automate version sync across all packages on release

.github/workflows/semantic-release.yml

@@ -33,6 +33,9 @@ jobs:
 
       - name: Release
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          # NPM_TOKEN: ${{ secrets.NPM_TOKEN }}  # uncomment when ready to publish to npm
+          # GH_TOKEN must be a PAT with repo + workflow scopes so @semantic-release/git
+          # can push the version bump commit back to the protected main branch.
+          # Create at: github.com/settings/tokens → Classic → repo + workflow scopes
+          # Add as secret: github.com/RustMunkey/maschina/settings/secrets/actions
+          GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
         run: pnpm exec semantic-release

.releaserc.json

@@ -14,8 +14,7 @@
           { "type": "chore", "release": false },
           { "type": "ci", "release": false },
           { "type": "test", "release": false },
-          { "type": "release", "release": "major" },
-          { "breaking": true, "release": "minor" }
+          { "breaking": true, "release": "major" }
         ]
       }
     ],
@@ -33,18 +32,24 @@
         }
       }
     ],
+    ["@semantic-release/changelog", { "changelogFile": "CHANGELOG.md" }],
     [
-      "@semantic-release/changelog",
-      {
-        "changelogFile": "CHANGELOG.md"
-      }
+      "@semantic-release/exec",
+      { "prepareCmd": "bash scripts/sync-versions.sh ${nextRelease.version}" }
     ],
     [
-      "@semantic-release/github",
+      "@semantic-release/git",
       {
-        "successComment": false,
-        "failComment": false
+        "assets": [
+          "CHANGELOG.md",
+          "package.json",
+          "packages/*/package.json",
+          "services/*/package.json",
+          "apps/*/package.json"
+        ],
+        "message": "chore(release): ${nextRelease.version} [skip ci]"
       }
-    ]
+    ],
+    ["@semantic-release/github", { "successComment": false, "failComment": false }]
   ]
 }

package.json

@@ -187,6 +187,8 @@
     "@discordjs/rest": "^2.6.1",
     "@irys/sdk": "^0.2.11",
     "@semantic-release/changelog": "^6",
+    "@semantic-release/exec": "^6",
+    "@semantic-release/git": "^10",
     "@semantic-release/github": "^10",
     "@types/node": "^22",
     "@vitest/coverage-v8": "^4.0.18",

scripts/sync-versions.sh

@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+# sync-versions.sh <version>
+# Updates every package.json version field in the monorepo.
+# Called by semantic-release via @semantic-release/exec.
+set -euo pipefail
+
+VERSION="${1:?version argument required}"
+
+echo "Syncing all package versions to $VERSION..."
+
+find . -name "package.json" \
+  -not -path "*/node_modules/*" \
+  -not -path "*/.git/*" \
+  -not -path "*/target/*" \
+  | while read -r file; do
+    if jq -e '.version' "$file" > /dev/null 2>&1; then
+      tmp=$(mktemp)
+      jq --arg v "$VERSION" '.version = $v' "$file" > "$tmp" && mv "$tmp" "$file"
+      echo "  $file → $VERSION"
+    fi
+  done
+
+echo "Done."