From 9a7c16ac4e07f9329e5558fe8bada658e9d77f6e Mon Sep 17 00:00:00 2001
From: Dermot Duffy <dermot.duffy@gmail.com>
Date: Sat, 14 Sep 2024 16:18:39 -0700
Subject: [PATCH] ci: Fix semantic release credentials (#1530)

---
 .github/workflows/semantic-release.yml | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/semantic-release.yml b/.github/workflows/semantic-release.yml
index 893cbb1e..167db5f1 100644
--- a/.github/workflows/semantic-release.yml
+++ b/.github/workflows/semantic-release.yml
@@ -5,9 +5,6 @@ permissions:
   contents: read
 
 on:
-  # TODO: Remove once semantic-release is working and before the dry-run flag is
-  # removed.
-  pull_request:
   push:
     branches:
       - main
@@ -18,6 +15,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+        with:
+          # Fetch all tags, so semantic-release can calculate the correct next release.
+          fetch-depth: 0
+
+          # Do not remove credentials after checkout.
+          persist-credentials: false
       - uses: volta-cli/action@v4
       - run: yarn install --immutable
       - run: npx semantic-release --dry-run