chore: migrate release-workflow to v2 (release-please)

.github/workflows/bump-spring.yml

@@ -65,10 +65,17 @@ jobs:
           cache: 'maven'
       - name: Bump version
         run: make bump-spring-boot BOOT=${{ needs.latest-version.outputs.spring-boot }}
+      - name: Generate app token
+        id: app-token
+        uses: actions/create-github-app-token@v3
+        with:
+          client-id: ${{ vars.CI_APP_CLIENT_ID }}
+          private-key: ${{ secrets.CI_APP_PRIVATE_KEY }}
       - name: Create Pull Request
         id: cpr
         uses: peter-evans/create-pull-request@v8
         with:
+          token: ${{ steps.app-token.outputs.token }}
           commit-message: "chore: bump spring-boot from ${{ needs.current-version.outputs.spring-boot }} to ${{ needs.latest-version.outputs.spring-boot }}"
           title: "Bump spring-boot from ${{ needs.current-version.outputs.spring-boot }} to ${{ needs.latest-version.outputs.spring-boot }}"
           committer: bot 👾 <[email protected]>
@@ -83,7 +90,7 @@ jobs:
         if: steps.cpr.outputs.pull-request-operation == 'created'
         run: gh pr merge --squash --auto "${{ steps.cpr.outputs.pull-request-number }}"
         env:
-          GH_TOKEN: ${{ github.token }}
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
   keepalive:
     runs-on: ubuntu-latest
     permissions:

.github/workflows/commitlint.yml

@@ -0,0 +1,13 @@
+name: Commitlint
+on:
+  pull_request:
+    branches: [jakarta]
+
+jobs:
+  commitlint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: wagoid/commitlint-github-action@v6

.github/workflows/release-please.yml

@@ -0,0 +1,47 @@
+# 自動發行 release: push to default branch → release-please 開 release PR → 人工 merge
+# → 自動 tag + GitHub Release → trigger Jenkins build & deploy
+name: Release Please
+
+on:
+  push:
+    branches: [jakarta]
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: write
+  issues: write
+
+# 序列化, 避免短時間多次 push 導致雙開 release PR / 雙觸發 Jenkins
+concurrency:
+  group: release-please-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  release-please:
+    runs-on: ubuntu-latest
+    outputs:
+      release_created: ${{ steps.rp.outputs.release_created }}
+      tag_name: ${{ steps.rp.outputs.tag_name }}
+      sha: ${{ steps.rp.outputs.sha }}
+    steps:
+      - uses: googleapis/[email protected]
+        id: rp
+        with:
+          config-file: .release-please-config.json
+          manifest-file: .release-please-manifest.json
+
+  trigger-jenkins:
+    runs-on: ubuntu-latest
+    needs: release-please
+    if: needs.release-please.outputs.release_created == 'true'
+    steps:
+      - id: specification-mapper-release
+        uses: shihyuho/go-jenkins-trigger@v2
+        with:
+          jenkins-url: "${{ secrets.JENKINS_URL }}"
+          jenkins-user: "${{ secrets.JENKINS_USER }}"
+          jenkins-pat: "${{ secrets.JENKINS_PAT }}"
+          job: "${{ github.action }}"
+          params: "ref=${{ needs.release-please.outputs.sha }},tag=${{ needs.release-please.outputs.tag_name }},"
+          wait: false

.release-please-config.json

@@ -0,0 +1,13 @@
+{
+  "$schema": "https://raw.githubusercontent.com/googleapis/release-please/main/schemas/config.json",
+  "packages": {
+    ".": {
+      "release-type": "maven",
+      "package-name": "specification-mapper",
+      "changelog-path": "CHANGELOG.md",
+      "include-v-in-tag": false,
+      "include-component-in-tag": false,
+      "skip-snapshot": true
+    }
+  }
+}

.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "3.2.2"
+}

AGENTS.md

@@ -0,0 +1,10 @@
+## Commit hygiene
+
+CI runs commitlint (`@commitlint/config-conventional`) and blocks merge on violations. Run this right after every `git commit` to catch issues before push (no setup required, cross-platform):
+
+```bash
+npx --yes -p @commitlint/cli -p @commitlint/config-conventional \
+  commitlint --last --extends @commitlint/config-conventional
+```
+
+On failure, fix with `git commit --amend -m "<corrected message>"` and re-run — only before the commit is pushed (amending pushed commits is destructive).

CHANGELOG.md

@@ -0,0 +1,3 @@
+# Changelog
+
+All notable changes from 3.2.3 onward are tracked here. Releases prior to 3.2.3 lived only as GitHub Releases under the v1 (Bump Version → Publish Release) flow.

CLAUDE.md

@@ -0,0 +1 @@
+@AGENTS.md