From d2c40fe0451f9225741b7e733610691d3c3758d8 Mon Sep 17 00:00:00 2001
From: "Tobias.Mikula" <tobias.mikula@absa.africa>
Date: Tue, 26 May 2026 06:53:40 +0200
Subject: [PATCH 1/2] Adding the RN Generator extra configuration.

---
 .github/workflows/check_pr_release_notes.yml |  4 ++++
 .github/workflows/release_draft.yml          | 10 ++++------
 2 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/check_pr_release_notes.yml b/.github/workflows/check_pr_release_notes.yml
index 3e10169..b899955 100644
--- a/.github/workflows/check_pr_release_notes.yml
+++ b/.github/workflows/check_pr_release_notes.yml
@@ -5,6 +5,10 @@ on:
     types: [opened, synchronize, reopened, edited, labeled, unlabeled]
     branches: [ master ]
 
+concurrency:
+  group: release-notes-check-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   check-release-notes:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/release_draft.yml b/.github/workflows/release_draft.yml
index f9f8f10..ce488da 100644
--- a/.github/workflows/release_draft.yml
+++ b/.github/workflows/release_draft.yml
@@ -11,6 +11,9 @@ on:
           Default value: latest tag. Syntax: "v[0-9]+.[0-9]+.[0-9]+".
         required: false
 
+permissions:
+  contents: write
+
 jobs:
   release-draft:
     runs-on: ubuntu-latest
@@ -83,12 +86,7 @@ jobs:
               tag: tag,
               message: tagMessage,
               object: sha,
-              type: 'commit',
-              tagger: {
-                name: context.actor,
-                email: `${context.actor}@users.noreply.github.com`,
-                date: new Date().toISOString()
-              }
+              type: 'commit'
             });
 
             await github.rest.git.createRef({

From 241f1a0f93d7c23edf660bbfa5c7052210fe1ae3 Mon Sep 17 00:00:00 2001
From: "Tobias.Mikula" <tobias.mikula@absa.africa>
Date: Tue, 26 May 2026 09:49:08 +0200
Subject: [PATCH 2/2] Making the tag verified.

---
 .github/workflows/release_draft.yml | 16 ++++------------
 1 file changed, 4 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/release_draft.yml b/.github/workflows/release_draft.yml
index ce488da..b0f09ea 100644
--- a/.github/workflows/release_draft.yml
+++ b/.github/workflows/release_draft.yml
@@ -13,6 +13,8 @@ on:
 
 permissions:
   contents: write
+  issues: read
+  pull-requests: read
 
 jobs:
   release-draft:
@@ -77,23 +79,13 @@ jobs:
           script: |
             const tag = process.env.TAG_NAME;
             const ref = `refs/tags/${tag}`;
-            const sha = context.sha; // The SHA of the commit to tag
-            const tagMessage = `${tag} released by GitHub Action`;
-
-            const tagObject = await github.rest.git.createTag({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              tag: tag,
-              message: tagMessage,
-              object: sha,
-              type: 'commit'
-            });
+            const sha = context.sha;
 
             await github.rest.git.createRef({
               owner: context.repo.owner,
               repo: context.repo.repo,
               ref: ref,
-              sha: tagObject.data.sha
+              sha: sha
             });
 
             console.log(`Tag created: ${tag}`);