ci: sign release commits with pgp key

.gitea/scripts/create-release.sh

@@ -58,6 +58,7 @@ tmp_changelog="CHANGELOG.tmp"
   echo ""
   if [ -n "$COMMITS" ]; then
     echo "---"
+    echo ""
     echo "$COMMITS"
     echo ""
   fi
@@ -72,11 +73,19 @@ mv "$tmp_changelog" CHANGELOG.md
 pnpm exec dprint fmt CHANGELOG.md
 
 # -------------------------------------------------------------------
-# 5. Create release commit
+# 5. Setup GPG signing
 # -------------------------------------------------------------------
-git config user.name "release-bot"
+echo "$BOT_PGP_PRIVATE_KEY" | base64 -d | gpg --batch --import --
-git config user.email "release-bot@ci"
+GPG_KEY_ID=$(gpg --list-secret-keys --keyid-format LONG nodarium-bot@max-richter.dev 2>/dev/null | grep sec | head -n1 | sed 's/.*\///' | tr -d ' ')
 
+git config user.name "nodarium-bot"
+git config user.email "nodarium-bot@max-richter.dev"
+git config user.signingkey "$GPG_KEY_ID"
+git config commit.gpgsign true
+
+# -------------------------------------------------------------------
+# 6. Create release commit
+# -------------------------------------------------------------------
 git add CHANGELOG.md $(find . -name package.json ! -path "*/node_modules/*")
 
 if git diff --cached --quiet; then

.gitea/workflows/release.yaml

@@ -57,6 +57,8 @@ jobs:
       - name: 🚀 Create Release Commit
         if: gitea.ref_type == 'tag'
         run: ./.gitea/scripts/create-release.sh
+        env:
+          BOT_PGP_PRIVATE_KEY : ${{ secrets.BOT_PGP_PRIVATE_KEY }}
 
       - name: 🛠️ Build
         run: ./.gitea/scripts/build.sh

CHANGELOG.md

@@ -1,18 +1,18 @@
 # v0.0.4 (2026-02-10)
 
-Features
+## Features
 
 - Added shape and leaf nodes, including rotation support.
 - Added high-contrast light theme and improved overall node readability.
 - Enhanced UI with dots background, clearer details, and consistent node coloring.
 - Improved changelog display and parsing robustness.
 
-Fixes
+## Fixes
 
 - Fixed UI issues (backside rendering, missing types, linter errors).
 - Improved CI handling of commit messages and changelog placement.
 
-Chores
+## Chores
 
 - Simplified CI quality checks.
 - Updated dprint linters.