feat(ci): automated release one way flow to main

[gabrielmfern]

This moves the changeset action that created pull requests bumping packages to canary only so that our new workflow will now change mainly to avoid having to update canary with new commits from main and only update main with canary.

Now the workflow for a canary release will be:

• Pull request entereing prerelease mode
  • pnpm changeset pre enter canary
• Approving bump pull request that will add -canary.x
• Release is done through the GitHub action

And the workflow for a stable release will be:

• Pull request exiting prerelease mode
  • pnpm changeset pre exit
  • Only required if we entered prerelease mode
• Approving bump pull request that will remove -canary.x, still in canary
  • release-canary workflow now specifically skips making a release when it sees that changeset is not in prerelease mode
• Rebase main with canary and push
• Release is done through the GitHub action

---

Summary by cubic

Reworks release automation so canary handles version bumps and release jobs only publish. Canary publishes only when in prerelease; stable publishes run on main.

• Refactors
  • Added .github/workflows/bump.yml to run on canary and open Changesets version PRs.
  • Simplified .github/workflows/release-canary.yml to call scripts/release-only-canary.ts; removed prerelease-enter and Changesets action.
  • Simplified .github/workflows/release.yml to run pnpm run release; removed prerelease-exit and Changesets action.

^{Written for commit eae0869. Summary will update on new commits.}

[changeset-bot]

⚠️ No Changeset found

Latest commit: eae0869

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (UTC)
react-email	Ready	Preview, Comment	Jan 19, 2026 4:09pm
react-email-demo	Ready	Preview, Comment	Jan 19, 2026 4:09pm

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

[cubic-dev-ai]

No issues found across 2 files