From caee689f152c8ea4bf7f909c84fd19649a23d28b Mon Sep 17 00:00:00 2001
From: "gandalf-the-greybeard[bot]"
 <gandalf-the-greybeard[bot]@users.noreply.github.com>
Date: Mon, 9 Mar 2026 19:18:07 +0000
Subject: [PATCH 1/2] fix: release workflow creates PR instead of pushing to
 main

The release workflow pushed directly to main which fails on repos
with branch protection enabled. This broke the polaris plugin v0.7.0
release.

Changes:
- Create release/vX.Y.Z branch instead of committing to main
- Push to the release branch + tags
- Create a PR to merge the version bump back to main
- Add pull-requests: write permission
---
 .github/workflows/plugin-release.yaml | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/plugin-release.yaml b/.github/workflows/plugin-release.yaml
index 89c8fd8..c507de6 100644
--- a/.github/workflows/plugin-release.yaml
+++ b/.github/workflows/plugin-release.yaml
@@ -20,6 +20,7 @@ on:
 
 permissions:
   contents: write
+  pull-requests: write
 
 concurrency:
   group: release
@@ -122,10 +123,12 @@ jobs:
       - name: Commit and tag
         run: |
           VERSION="${{ inputs.version }}"
+          BRANCH="release/v${VERSION}"
           git add package.json package-lock.json artifacthub-pkg.yml
           git commit -m "release: v${VERSION}"
           git tag "v${VERSION}"
-          git push origin main --tags
+          git checkout -b "$BRANCH"
+          git push origin "$BRANCH" --tags
 
       - name: Create GitHub Release
         uses: softprops/action-gh-release@v2
@@ -136,3 +139,14 @@ jobs:
           generate_release_notes: true
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Create PR for version bump
+        run: |
+          VERSION="${{ inputs.version }}"
+          gh pr create \
+            --title "release: v${VERSION}" \
+            --body "Automated version bump and checksum update for v${VERSION}." \
+            --base main \
+            --head "release/v${VERSION}"
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

From 7a035654c969bc911ca02c69b3b7e963a4861607 Mon Sep 17 00:00:00 2001
From: "gandalf-the-greybeard[bot]"
 <gandalf-the-greybeard[bot]@users.noreply.github.com>
Date: Mon, 9 Mar 2026 19:22:10 +0000
Subject: [PATCH 2/2] feat: auto-merge and cleanup release version bump PRs

The release PR is just a version bump + checksum update. Enable
auto-merge with squash and delete the release branch after merge
to prevent branch accumulation.
---
 .github/workflows/plugin-release.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/plugin-release.yaml b/.github/workflows/plugin-release.yaml
index c507de6..82b2484 100644
--- a/.github/workflows/plugin-release.yaml
+++ b/.github/workflows/plugin-release.yaml
@@ -148,5 +148,6 @@ jobs:
             --body "Automated version bump and checksum update for v${VERSION}." \
             --base main \
             --head "release/v${VERSION}"
+          gh pr merge "release/v${VERSION}" --auto --squash --delete-branch
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}