feat: switch to label-driven releases with workflow_dispatch escape hatch (#160)

## Summary

- Removes the `release: published` trigger (was the source of the
circular tag problem)
- Adds `workflow_dispatch` trigger with `bump-type` input
(patch/minor/major) as an escape hatch for "I forgot to add the label"
- Adds a `detect-mode` job that reads the merged PR's labels to decide
dev vs release mode
- Passes `bump-type` through to the reusable workflow so
`workflow_dispatch` works without a PR to read labels from

## How releases work now

**Normal flow (merge with label):**
1. Add `release`, `release:minor`, or `release:major` label to the PR
before merging
2. Merge to `main` — CI detects the label, runs in release mode, bumps
version, tags, publishes to npm, creates GitHub Release

**Forgot the label (escape hatch):**
1. Go to Actions → "Publish UI to NPM" → Run workflow
2. Choose bump type (patch/minor/major)
3. Workflow runs in release mode manually

**No label (default):**
- Publishes a dev build (`x.y.z-dev.{sha}`) to the `@dev` npm dist-tag
only

## Dependency

Requires `datum-cloud/actions` datum-cloud/actions#59 to be merged and
tagged as `v1.13.0` first — this workflow references that version.

## Test plan

- [ ] datum-cloud/actions#59 merged and tagged `v1.13.0`
- [ ] Update the `@v1.13.0` reference in this file once that tag exists
- [ ] Merge a PR without a release label → confirm dev build published,
no GH Release created
- [ ] Merge a PR with `release:minor` label → confirm minor version bump
+ GH Release
- [ ] Trigger `workflow_dispatch` with `major` → confirm major bump + GH
Release

Author: kevwilliams

.github/workflows/publish-ui-npm.yaml

@@ -4,14 +4,69 @@ on:
   push:
     branches:
       - main
-  release:
-    types: [published]
+  workflow_dispatch:
+    inputs:
+      bump-type:
+        description: "Version bump type"
+        type: choice
+        options: [patch, minor, major]
+        default: patch
 
 jobs:
-  publish:
-    uses: datum-cloud/actions/.github/workflows/publish-npm-package.yaml@v1.12.1
+  # ── Dev publish ──────────────────────────────────────────────────────────
+  # Every push to main publishes a pre-release dev build. Releases are
+  # triggered manually via workflow_dispatch when the team is ready to ship.
+  publish-dev:
+    name: Publish dev build
+    if: github.event_name == 'push'
+    uses: datum-cloud/actions/.github/workflows/publish-npm-package.yaml@v1.13.0
     with:
       package-name: "@datum-cloud/activity-ui"
       package-path: ui
-      release-mode: ${{ github.event_name == 'release' && 'release' || 'dev' }}
+      release-mode: dev
     secrets: inherit
+
+  # ── Bump version ─────────────────────────────────────────────────────────
+  # Runs only on manual dispatch. Delegates to the shared bump-npm-version
+  # reusable workflow, which bumps package.json, commits, tags, and pushes.
+  # Downstream jobs read new-version from this job's outputs automatically.
+  bump-version:
+    name: Bump version
+    if: github.event_name == 'workflow_dispatch'
+    permissions:
+      contents: write
+    uses: datum-cloud/actions/.github/workflows/bump-npm-version.yaml@v1.13.0
+    with:
+      package-path: ui
+      package-name: "@datum-cloud/activity-ui"
+      bump-type: ${{ inputs.bump-type }}
+
+  # ── Publish release to npm ───────────────────────────────────────────────
+  # Runs after bump-version. package.json already has the bumped version.
+  publish-release:
+    name: Publish release
+    needs: bump-version
+    uses: datum-cloud/actions/.github/workflows/publish-npm-package.yaml@v1.13.0
+    with:
+      package-name: "@datum-cloud/activity-ui"
+      package-path: ui
+      release-mode: release
+    secrets: inherit
+
+  # ── Create GitHub Release ────────────────────────────────────────────────
+  create-release:
+    name: Create GitHub Release
+    needs: [bump-version, publish-release]
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Create GitHub Release
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          RELEASE_VERSION: ${{ needs.bump-version.outputs.new-version }}
+        run: |
+          gh release create "$RELEASE_VERSION" \
+            --title "@datum-cloud/activity-ui $RELEASE_VERSION" \
+            --generate-notes \
+            --repo ${{ github.repository }}