ci: update release process

Signed-off-by: Michael Beemer <[email protected]>

.github/workflows/dco-exceptions.yaml

@@ -0,0 +1,18 @@
+name: DCO
+on:
+  merge_group:
+  pull_request:
+
+permissions:  # set top-level default permissions as security best practice
+  contents: read # Check https://github.com/ossf/scorecard/blob/7ce8609469289d5f3b1bf5ee3122f42b4e3054fb/docs/checks.md#token-permissions
+
+jobs:
+  DCO:
+    runs-on: ubuntu-latest
+    steps:
+      - if: ${{ github.event_name == 'merge_group' }}
+        run: echo "skipping DCO check for the merge group"
+
+      ## Allow openfeaturebo skip DCO checks
+      - if: ${{ github.event_name == 'pull_request' && github.actor == 'openfeaturebot' }}
+        run: echo "skipping DCO for the OpenFeature Bot"

.github/workflows/release.yaml

@@ -19,7 +19,7 @@ jobs:
       - uses: googleapis/release-please-action@v4
         id: release
         with:
-          token: ${{secrets.GITHUB_TOKEN}}
+          token: ${{secrets.RELEASE_PLEASE_ACTION_TOKEN}}
           target-branch: main
       - name: Dump Release Please Output
         env:

release-please-config.json

@@ -1,4 +1,5 @@
 {
+  "signoff": "OpenFeature Bot <[email protected]>",
   "packages": {
     ".": {
       "release-type": "go",