ci: Fix auto-release (#1067)

Author: mtrezza

.github/workflows/release-automated.yml

@@ -16,21 +16,20 @@ on:
 env:
   package: ${{ startsWith(github.ref_name, 'dart-') && 'dart' || startsWith(github.ref_name, 'flutter-') && 'flutter' || '' }}
 jobs:
-  # Semantic Release job - runs on branch pushes to create tags and update changelogs
   semantic-release:
     if: github.event_name == 'push' && github.ref_type == 'branch'
     runs-on: ubuntu-latest
     timeout-minutes: 10
     permissions:
-      contents: write # Required for creating tags and commits
-      issues: write # Required for commenting on issues
-      pull-requests: write # Required for commenting on PRs
+      contents: write
+      issues: write
+      pull-requests: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
-          fetch-depth: 0 # Required for semantic-release
-          persist-credentials: true
+          fetch-depth: 0
+          persist-credentials: false
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
@@ -39,26 +38,26 @@ jobs:
       - name: Install dependencies
         run: npm ci
       - name: Run semantic-release for dart package
+        run: npx semantic-release
         env:
+          GH_TOKEN: ${{ secrets.RELEASE_GITHUB_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           PKG_NAME: dart
-        run: npx semantic-release
       - name: Run semantic-release for flutter package
+        run: npx semantic-release
         env:
+          GH_TOKEN: ${{ secrets.RELEASE_GITHUB_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           PKG_NAME: flutter
-        run: npx semantic-release
-
-  # Publishing job - runs when a tag is pushed (created by semantic-release)
   release:
     if: github.event_name == 'push' && github.ref_type == 'tag'
     runs-on: ubuntu-latest
     timeout-minutes: 10
     permissions:
-      id-token: write # This is required for requesting the JWT
+      id-token: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           ref: ${{ github.ref_name }}
       - name: Setup dart