Fix "Bump changelog on release" GH Action

[chrysle]

• I have added an entry to docs/changelog.md

Summary of changes

Basically I made sure I'm allowed to bypass the branch protection rules and configured the action to commit with my identity.
I think we shouldn't remove the branch protection.

This ought to close #1185.

Test plan

Tested by running

# command(s) to exercise these changes

[henryiii]

Wouldn't it be better to have it make a PR? That's what I was intending to do later.

[chrysle]

@henryiii I thought merging that every time would mean increased effort, but I guess you're right. If you don't insist on doing it, I could also configure it in this PR (I'd use GH CLI).

[henryiii]

You are welcome to do it. :) I think you can use the gh CLI, I've intended to try with that, I've used https://github.com/peter-evans/create-pull-request before and it works well. You do have to close and reopen to trigger CI unless you set up a bot, which I haven't done yet.

https://github.com/scientific-python/cookie/blob/main/.github/workflows/bump.yml is one I've set up, another is https://github.com/pypa/cibuildwheel/blob/main/.github/workflows/update-dependencies.yml which does have the bot.

[chrysle]

I've already pushed an attempt, could you have a look?

[henryiii]

I haven't tried gh for this, so I don't want to guarantee anything, but it looks correct and like what I would have tried, I think.

[chrysle]

@henryiii @dukecat0 I don't seem to be able to test this fully on my fork (see this actions run), but judging by what does work there, this should be ready.

[gaborbernat]

[henryiii]

Do you need the pull-requests: write permission? I noticed I have that one one that uses peter-evans/create-pull-request@v5. (I'm not sure how to nicely do a "Make a pull request only if changed", or I would have projects to test out gh pr in CI).

https://github.com/scientific-python/cookie/blob/57fc35295e5cfc79b9152a82d183cb8c73c6865b/.github/workflows/bump.yml#L9

[gaborbernat]

@chrysle this failed https://github.com/pypa/pipx/actions/runs/7503796146/job/20430009811 ...

[henryiii]

Fix in #1202, it was missing pull-requests: write.