From 6b281b9eed8163b3be3cab0768ad2654a6c799e3 Mon Sep 17 00:00:00 2001
From: Parker Brown <17183625+parkerbxyz@users.noreply.github.com>
Date: Mon, 12 Oct 2026 16:14:57 -0700
Subject: [PATCH] ci: create signed dist commits in release workflow

Replace git-auto-commit-action with dsanders11/github-app-commit-action,
which commits staged changes through the REST Git Data API with the
releaser app token. GitHub signs commits that a GitHub App creates through
the API, so the dist commit on release-please PRs satisfies the
required_signatures rule on main.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: c91009d9-b4f7-4eec-b30f-4b24ae578aa1
---
 .github/workflows/release.yml | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 11564e82..3ce40fe1 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -51,12 +51,15 @@ jobs:
       - run: npm run build
         if: steps.release-please.outputs.prs_created == 'true'
 
-      - uses: stefanzweifel/git-auto-commit-action@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d # v7.2.0
+      - run: git add dist
+        if: steps.release-please.outputs.prs_created == 'true'
+
+      - uses: dsanders11/github-app-commit-action@2bbcd331016d8c950b05a24b56e7eb9cb50d545e # v2.1.0
         if: steps.release-please.outputs.prs_created == 'true'
         with:
-          commit_author: "${{ github.actor }} <${{ github.actor_id }}+${{ github.actor }}@users.noreply.github.com>"
-          commit_message: "chore: update dist files"
-          file_pattern: dist/**
+          message: "chore: update dist files"
+          token: ${{ steps.app-token.outputs.token }}
+          fail-on-no-changes: false
 
       - name: Update major version tag
         id: update-major-tag