Adopt release-please + tag-gated production deploys

.github/workflows/promote-release.yml

@@ -0,0 +1,36 @@
+name: Promote release tag to deploy branch
+
+# Cloudflare Workers Builds' Git integration only watches branches, never
+# tags. To get tag-gated production deploys we keep `main` as a
+# preview-only branch in the Workers Build branch control and point the
+# Workers production branch at `release`. This workflow fast-forwards
+# `release` to every `v*` tag release-please publishes, which is what
+# actually triggers the Cloudflare Workers production build.
+on:
+  push:
+    tags:
+      - 'v*'
+
+permissions:
+  contents: write
+
+concurrency:
+  group: promote-release-branch
+  cancel-in-progress: false
+
+jobs:
+  promote:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Fast-forward release branch to the tagged commit
+        run: |
+          set -euo pipefail
+          echo "Promoting ${GITHUB_REF_NAME} ($(git rev-parse --short HEAD)) to release"
+          # release-please tags always sit on main's linear history, so the
+          # release branch only ever moves forward. No force push.
+          git push origin "HEAD:refs/heads/release"

.github/workflows/release-please.yml

@@ -0,0 +1,27 @@
+name: Release Please
+
+on:
+  push:
+    branches: [main]
+
+# Release Please opens (or updates) a release PR. Once that PR is merged,
+# the same workflow run promotes the merge into a tag + GitHub Release.
+permissions:
+  contents: write
+  pull-requests: write
+
+# Allow only one release run at a time so concurrent pushes to main don't
+# race on the release PR.
+concurrency:
+  group: release-please-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  release-please:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: googleapis/release-please-action@v4
+        with:
+          config-file: release-please-config.json
+          manifest-file: .release-please-manifest.json

.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.0.0"
+}

package.json

@@ -22,7 +22,6 @@
     "generate": "nuxt generate",
     "preview": "nuxt preview",
     "postinstall": "nuxt prepare",
-    "release": "semantic-release",
     "seo:check": "node scripts/seo-check.mjs",
     "seo:lighthouse": "lhci autorun --config=./.lighthouserc.json"
   },
@@ -36,11 +35,6 @@
     "@nuxtjs/seo": "3.2.2",
     "@nuxtjs/sitemap": "7.4.11",
     "@resvg/resvg-wasm": "2.6.2",
-    "@semantic-release/changelog": "^6.0.3",
-    "@semantic-release/commit-analyzer": "^13.0.1",
-    "@semantic-release/git": "^10.0.1",
-    "@semantic-release/npm": "^13.1.2",
-    "@semantic-release/release-notes-generator": "^14.1.0",
     "@tailwindcss/postcss": "^4.1.17",
     "@tailwindcss/vite": "^4.1.17",
     "@unhead/vue": "^2.0.19",
@@ -65,7 +59,6 @@
     "remark-mdc": "^3.8.1",
     "remark-rehype": "^11.1.2",
     "satori": "0.26.0",
-    "semantic-release": "^25.0.2",
     "tailwindcss": "^4.1.17",
     "typescript": "5.9.3",
     "unified": "^11.0.5",