chore(ci): add release-please for automated version + changelog management

.github/workflows/release-please.yaml

@@ -0,0 +1,24 @@
+name: Release Please
+
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: write
+  pull-requests: write
+  issues: write
+
+jobs:
+  release-please:
+    name: Release Please
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+
+    steps:
+      - name: Run release-please
+        uses: googleapis/release-please-action@16a9c90856f42705d54a6fda1823352bdc62cf38 # v4.4.0
+        with:
+          release-type: simple
+          target-branch: main

.gitignore

@@ -11,12 +11,15 @@
 !/.github/dependabot.yml
 !/.github/workflows/
 !/.github/workflows/release-artifact.yml
+!/.github/workflows/release-please.yaml
 !/.github/workflows/verify.yml
 !/.gitignore
+!/.release-please-manifest.json
 !/LICENSE
 !/Makefile
 !/README.md
 !/SECURITY.md
+!/release-please-config.json
 
 !/bin/
 !/bin/secure-packer-bootstrapper

.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "1.0.0"
+}

release-please-config.json

@@ -0,0 +1,20 @@
+{
+  "$schema": "https://raw.githubusercontent.com/googleapis/release-please/main/schemas/config.json",
+  "release-type": "simple",
+  "target-branch": "main",
+  "changelog-sections": [
+    { "type": "feat",     "section": "Features"         },
+    { "type": "fix",      "section": "Bug Fixes"        },
+    { "type": "security", "section": "Security"         },
+    { "type": "refactor", "section": "Refactoring"      },
+    { "type": "ci",       "section": "CI/CD"            },
+    { "type": "docs",     "section": "Documentation"    },
+    { "type": "chore",    "section": "Chores", "hidden": true },
+    { "type": "test",     "section": "Tests",  "hidden": true }
+  ],
+  "pull-request-title-pattern": "chore: release ${version}",
+  "include-v-in-tag": true,
+  "packages": {
+    ".": {}
+  }
+}