From fb282e022a9e07c4aa4138bd393555229da45a9c Mon Sep 17 00:00:00 2001
From: Hadrien David <75603+hadrien@users.noreply.github.com>
Date: Sun, 2 Aug 2026 09:43:34 -0400
Subject: [PATCH 1/6] fix(ci): restore semantic release publishing (#128)

---
 .github/workflows/release.yml | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 59dddb9..5ba5691 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -22,16 +22,17 @@ jobs:
       uses: ./.github/uv
     - name: 📜 semantic release version & publish on PyPI
       run: |
-        RET_CODE=0
-        uv run semantic-release --strict version || RET_CODE=$?
-        if [ $RET_CODE -ne 0 ]; then
+        next_version=$(uv run semantic-release version --print)
+        last_released_version=$(uv run semantic-release version --print-last-released)
+        if [[ "$next_version" == "$last_released_version" ]]; then
           echo "🙅🏽 Nothing to publish"
         else
+          uv run semantic-release version
           echo "🙆🏽 Publishing on PyPI"
           uv build
           uv run twine upload dist/*
         fi
       env:
-        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        GH_TOKEN: ${{ secrets.GH_PERSONAL_ACCESS_TOKEN }}
         TWINE_USERNAME: ${{ secrets.TWINE_USERNAME }}
         TWINE_PASSWORD: ${{ secrets.TWINE_PASSWORD }}

From 96766c7699af9e722f3a86fc34b6fc3d6424352d Mon Sep 17 00:00:00 2001
From: Hadrien David <75603+hadrien@users.noreply.github.com>
Date: Sun, 2 Aug 2026 09:53:11 -0400
Subject: [PATCH 2/6] fix(ci): release through protected main (#129)

---
 .github/workflows/release.yml | 50 ++++++++++++++++++++++++++++++-----
 1 file changed, 44 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5ba5691..f39341a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -4,13 +4,16 @@ on:
   push:
     branches:
       - main
+    tags:
+      - 'v*'
 
 jobs:
 
   Release-And-Publish:
     runs-on: ubuntu-latest
-    concurrency: release
+    concurrency: release-${{ github.ref_type }}
     permissions:
+      actions: read
       contents: write
       id-token: write
     steps:
@@ -18,21 +21,56 @@ jobs:
       uses: actions/checkout@v7
       with:
         fetch-depth: 0
+        token: ${{ secrets.GH_PERSONAL_ACCESS_TOKEN }}
     - name: 🔧 setup uv
       uses: ./.github/uv
     - name: 📜 semantic release version & publish on PyPI
       run: |
+        if [[ "$GITHUB_REF_TYPE" == "tag" ]]; then
+          uv run semantic-release changelog --post-to-release-tag "$GITHUB_REF_NAME"
+          echo "🙆🏽 Publishing on PyPI"
+          uv build
+          uv run twine upload dist/*
+          exit 0
+        fi
+
         next_version=$(uv run semantic-release version --print)
         last_released_version=$(uv run semantic-release version --print-last-released)
         if [[ "$next_version" == "$last_released_version" ]]; then
           echo "🙅🏽 Nothing to publish"
         else
-          uv run semantic-release version
-          echo "🙆🏽 Publishing on PyPI"
-          uv build
-          uv run twine upload dist/*
+          release_tag=$(uv run semantic-release version --print-tag)
+          uv run semantic-release version --no-push --no-vcs-release
+          release_sha=$(git rev-parse HEAD)
+          release_branch="release/${release_tag}-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}"
+          git push origin "HEAD:refs/heads/${release_branch}"
+
+          ci_run_id=""
+          for _ in {1..120}; do
+            ci_run_id=$(gh run list \
+              --workflow ci.yml \
+              --branch "$release_branch" \
+              --commit "$release_sha" \
+              --limit 1 \
+              --json databaseId \
+              --jq '.[0].databaseId')
+            if [[ -n "$ci_run_id" ]]; then
+              break
+            fi
+            sleep 5
+          done
+          if [[ -z "$ci_run_id" ]]; then
+            echo "CI did not start for release commit $release_sha" >&2
+            exit 1
+          fi
+
+          gh run watch "$ci_run_id" --exit-status
+          git push --atomic origin \
+            "HEAD:refs/heads/main" \
+            "refs/tags/${release_tag}:refs/tags/${release_tag}"
+          git push origin --delete "$release_branch"
         fi
       env:
-        GH_TOKEN: ${{ secrets.GH_PERSONAL_ACCESS_TOKEN }}
+        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         TWINE_USERNAME: ${{ secrets.TWINE_USERNAME }}
         TWINE_PASSWORD: ${{ secrets.TWINE_PASSWORD }}

From 97f63814db00876b13d6482aeaa3972245bdeb5c Mon Sep 17 00:00:00 2001
From: Hadrien David <75603+hadrien@users.noreply.github.com>
Date: Sun, 2 Aug 2026 09:56:57 -0400
Subject: [PATCH 3/6] fix(ci): authenticate release pushes explicitly (#130)

---
 .github/workflows/release.yml | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f39341a..5697b0e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -21,7 +21,7 @@ jobs:
       uses: actions/checkout@v7
       with:
         fetch-depth: 0
-        token: ${{ secrets.GH_PERSONAL_ACCESS_TOKEN }}
+        persist-credentials: false
     - name: 🔧 setup uv
       uses: ./.github/uv
     - name: 📜 semantic release version & publish on PyPI
@@ -43,7 +43,8 @@ jobs:
           uv run semantic-release version --no-push --no-vcs-release
           release_sha=$(git rev-parse HEAD)
           release_branch="release/${release_tag}-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}"
-          git push origin "HEAD:refs/heads/${release_branch}"
+          release_remote="https://${GITHUB_ACTOR}:${RELEASE_TOKEN}@github.com/${GITHUB_REPOSITORY}.git"
+          git push "$release_remote" "HEAD:refs/heads/${release_branch}"
 
           ci_run_id=""
           for _ in {1..120}; do
@@ -65,12 +66,13 @@ jobs:
           fi
 
           gh run watch "$ci_run_id" --exit-status
-          git push --atomic origin \
+          git push --atomic "$release_remote" \
             "HEAD:refs/heads/main" \
             "refs/tags/${release_tag}:refs/tags/${release_tag}"
-          git push origin --delete "$release_branch"
+          git push "$release_remote" --delete "$release_branch"
         fi
       env:
         GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        RELEASE_TOKEN: ${{ secrets.GH_PERSONAL_ACCESS_TOKEN }}
         TWINE_USERNAME: ${{ secrets.TWINE_USERNAME }}
         TWINE_PASSWORD: ${{ secrets.TWINE_PASSWORD }}

From 5dd5369a4d9c9183057f338823b3c1059bd49b58 Mon Sep 17 00:00:00 2001
From: Hadrien David <75603+hadrien@users.noreply.github.com>
Date: Sun, 2 Aug 2026 10:01:53 -0400
Subject: [PATCH 4/6] fix(ci): dispatch release checks explicitly (#131)

---
 .github/workflows/ci.yml      |  1 +
 .github/workflows/release.yml | 30 ++++++++++++------------------
 2 files changed, 13 insertions(+), 18 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1dd8b91..f5db0ec 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -2,6 +2,7 @@ name: CI
 
 on:
   push:
+  workflow_dispatch:
 
 jobs:
   Tests:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5697b0e..243e5aa 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -4,16 +4,14 @@ on:
   push:
     branches:
       - main
-    tags:
-      - 'v*'
 
 jobs:
 
   Release-And-Publish:
     runs-on: ubuntu-latest
-    concurrency: release-${{ github.ref_type }}
+    concurrency: release
     permissions:
-      actions: read
+      actions: write
       contents: write
       id-token: write
     steps:
@@ -21,19 +19,10 @@ jobs:
       uses: actions/checkout@v7
       with:
         fetch-depth: 0
-        persist-credentials: false
     - name: 🔧 setup uv
       uses: ./.github/uv
     - name: 📜 semantic release version & publish on PyPI
       run: |
-        if [[ "$GITHUB_REF_TYPE" == "tag" ]]; then
-          uv run semantic-release changelog --post-to-release-tag "$GITHUB_REF_NAME"
-          echo "🙆🏽 Publishing on PyPI"
-          uv build
-          uv run twine upload dist/*
-          exit 0
-        fi
-
         next_version=$(uv run semantic-release version --print)
         last_released_version=$(uv run semantic-release version --print-last-released)
         if [[ "$next_version" == "$last_released_version" ]]; then
@@ -43,8 +32,8 @@ jobs:
           uv run semantic-release version --no-push --no-vcs-release
           release_sha=$(git rev-parse HEAD)
           release_branch="release/${release_tag}-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}"
-          release_remote="https://${GITHUB_ACTOR}:${RELEASE_TOKEN}@github.com/${GITHUB_REPOSITORY}.git"
-          git push "$release_remote" "HEAD:refs/heads/${release_branch}"
+          git push origin "HEAD:refs/heads/${release_branch}"
+          gh workflow run ci.yml --ref "$release_branch"
 
           ci_run_id=""
           for _ in {1..120}; do
@@ -52,6 +41,7 @@ jobs:
               --workflow ci.yml \
               --branch "$release_branch" \
               --commit "$release_sha" \
+              --event workflow_dispatch \
               --limit 1 \
               --json databaseId \
               --jq '.[0].databaseId')
@@ -66,13 +56,17 @@ jobs:
           fi
 
           gh run watch "$ci_run_id" --exit-status
-          git push --atomic "$release_remote" \
+          git push --atomic origin \
             "HEAD:refs/heads/main" \
             "refs/tags/${release_tag}:refs/tags/${release_tag}"
-          git push "$release_remote" --delete "$release_branch"
+          git push origin --delete "$release_branch"
+          gh workflow run doc.yml --ref "$release_tag"
+          uv run semantic-release changelog --post-to-release-tag "$release_tag"
+          echo "🙆🏽 Publishing on PyPI"
+          uv build
+          uv run twine upload dist/*
         fi
       env:
         GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        RELEASE_TOKEN: ${{ secrets.GH_PERSONAL_ACCESS_TOKEN }}
         TWINE_USERNAME: ${{ secrets.TWINE_USERNAME }}
         TWINE_PASSWORD: ${{ secrets.TWINE_PASSWORD }}

From 2b784672def0d6ead00219c42c425e5ced64007d Mon Sep 17 00:00:00 2001
From: Hadrien David <75603+hadrien@users.noreply.github.com>
Date: Sun, 2 Aug 2026 10:17:00 -0400
Subject: [PATCH 5/6] fix(ci): merge release commits through prs (#132)

---
 .github/workflows/release.yml | 32 ++++++++++++++++++++++++++++----
 1 file changed, 28 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 243e5aa..bb3b068 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -14,6 +14,7 @@ jobs:
       actions: write
       contents: write
       id-token: write
+      pull-requests: write
     steps:
     - name: 📥 checkout
       uses: actions/checkout@v7
@@ -33,6 +34,13 @@ jobs:
           release_sha=$(git rev-parse HEAD)
           release_branch="release/${release_tag}-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}"
           git push origin "HEAD:refs/heads/${release_branch}"
+          release_pr_body=$'# Problem\n\n- Generated release metadata must pass protected-main checks.\n\n# Solution\n\n- Apply the version and changelog generated by Python Semantic Release.'
+          release_pr_url=$(gh pr create \
+            --base main \
+            --head "$release_branch" \
+            --title "chore(release): ${release_tag}" \
+            --body "$release_pr_body")
+          release_pr_number=$(gh pr view "$release_pr_url" --json number --jq .number)
           gh workflow run ci.yml --ref "$release_branch"
 
           ci_run_id=""
@@ -56,10 +64,26 @@ jobs:
           fi
 
           gh run watch "$ci_run_id" --exit-status
-          git push --atomic origin \
-            "HEAD:refs/heads/main" \
-            "refs/tags/${release_tag}:refs/tags/${release_tag}"
-          git push origin --delete "$release_branch"
+          merge_response=$(gh api \
+            --method PUT \
+            "repos/${GITHUB_REPOSITORY}/pulls/${release_pr_number}/merge" \
+            -f merge_method=squash \
+            -f sha="$release_sha" \
+            -f commit_title="chore(release): ${release_tag}" \
+            -f commit_message="Automatically generated by python-semantic-release")
+          if [[ "$(jq -r .merged <<< "$merge_response")" != "true" ]]; then
+            jq -r .message <<< "$merge_response" >&2
+            exit 1
+          fi
+
+          merge_sha=$(jq -r .sha <<< "$merge_response")
+          git fetch origin main
+          git merge-base --is-ancestor "$merge_sha" origin/main
+          git tag --force --annotate "$release_tag" "$merge_sha" --message "$release_tag"
+          git push origin "refs/tags/${release_tag}:refs/tags/${release_tag}"
+          if git ls-remote --exit-code --heads origin "$release_branch" >/dev/null; then
+            git push origin --delete "$release_branch"
+          fi
           gh workflow run doc.yml --ref "$release_tag"
           uv run semantic-release changelog --post-to-release-tag "$release_tag"
           echo "🙆🏽 Publishing on PyPI"

From 5c3186464be750e5f263d808910ec01516f80d37 Mon Sep 17 00:00:00 2001
From: semantic-release <semantic-release>
Date: Sun, 2 Aug 2026 14:17:14 +0000
Subject: [PATCH 6/6] 0.8.0

Automatically generated by python-semantic-release
---
 CHANGELOG.md   | 96 ++++++++++++++++++++++++++++++++++++++++++++++++++
 pyproject.toml |  2 +-
 2 files changed, 97 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 627f42d..22d2534 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,102 @@
 # CHANGELOG
 
 
+## v0.8.0 (2026-08-02)
+
+### Bug Fixes
+
+- Satisfy Ruff 0.16 checks ([#112](https://github.com/hadrien/FastSQLA/pull/112),
+  [`37a0b8f`](https://github.com/hadrien/FastSQLA/commit/37a0b8fb03c6b6b1232b2af9485bdb6b1bc647e2))
+
+- **ci**: Authenticate release pushes explicitly
+  ([#130](https://github.com/hadrien/FastSQLA/pull/130),
+  [`97f6381`](https://github.com/hadrien/FastSQLA/commit/97f63814db00876b13d6482aeaa3972245bdeb5c))
+
+- **ci**: Dispatch release checks explicitly ([#131](https://github.com/hadrien/FastSQLA/pull/131),
+  [`5dd5369`](https://github.com/hadrien/FastSQLA/commit/5dd5369a4d9c9183057f338823b3c1059bd49b58))
+
+- **ci**: Merge release commits through prs ([#132](https://github.com/hadrien/FastSQLA/pull/132),
+  [`2b78467`](https://github.com/hadrien/FastSQLA/commit/2b784672def0d6ead00219c42c425e5ced64007d))
+
+- **ci**: Release through protected main ([#129](https://github.com/hadrien/FastSQLA/pull/129),
+  [`96766c7`](https://github.com/hadrien/FastSQLA/commit/96766c7699af9e722f3a86fc34b6fc3d6424352d))
+
+- **ci**: Restore semantic release publishing ([#128](https://github.com/hadrien/FastSQLA/pull/128),
+  [`fb282e0`](https://github.com/hadrien/FastSQLA/commit/fb282e022a9e07c4aa4138bd393555229da45a9c))
+
+- **deps**: Bump fastapi from 0.139.0 to 0.140.0
+  ([#109](https://github.com/hadrien/FastSQLA/pull/109),
+  [`2731f5e`](https://github.com/hadrien/FastSQLA/commit/2731f5ea7242b448acdcd7f0439fb956d5b32b37))
+
+- **deps**: Bump mkdocs-material from 9.7.6 to 9.7.7
+  ([#111](https://github.com/hadrien/FastSQLA/pull/111),
+  [`4673ea8`](https://github.com/hadrien/FastSQLA/commit/4673ea8d229cc5089517a422bbb62a5f1ab0ea28))
+
+- **deps**: Update greenlet for Python 3.14 ([#126](https://github.com/hadrien/FastSQLA/pull/126),
+  [`3fef256`](https://github.com/hadrien/FastSQLA/commit/3fef25692f41f905df3d9719044a096a85186c09))
+
+- **deps-dev**: Bump faker from 40.19.1 to 40.36.0
+  ([#110](https://github.com/hadrien/FastSQLA/pull/110),
+  [`0814aff`](https://github.com/hadrien/FastSQLA/commit/0814aff144edb2600d4ee5a900db43a814063c63))
+
+- **deps-dev**: Bump python-semantic-release from 10.5.3 to 10.6.1
+  ([#108](https://github.com/hadrien/FastSQLA/pull/108),
+  [`7961548`](https://github.com/hadrien/FastSQLA/commit/796154823add9efeb1198e0fb4078912dca03824))
+
+- **deps-dev**: Bump ruff from 0.15.16 to 0.16.0
+  ([#112](https://github.com/hadrien/FastSQLA/pull/112),
+  [`37a0b8f`](https://github.com/hadrien/FastSQLA/commit/37a0b8fb03c6b6b1232b2af9485bdb6b1bc647e2))
+
+### Build System
+
+- **deps**: Bump fastapi from 0.140.0 to 0.140.13
+  ([#125](https://github.com/hadrien/FastSQLA/pull/125),
+  [`8500789`](https://github.com/hadrien/FastSQLA/commit/8500789f44230935f001e21c2506928eb51a3331))
+
+### Chores
+
+- Configure dependency commit semantics ([#118](https://github.com/hadrien/FastSQLA/pull/118),
+  [`433305e`](https://github.com/hadrien/FastSQLA/commit/433305e27958904b9d9f38415e513e430737db41))
+
+- Configure secure Dependabot automerge ([#117](https://github.com/hadrien/FastSQLA/pull/117),
+  [`9eebdfd`](https://github.com/hadrien/FastSQLA/commit/9eebdfdd0aaef0b6d581543cd53d2e9e9d78c9f9))
+
+- Consolidate agent packaging ([#113](https://github.com/hadrien/FastSQLA/pull/113),
+  [`931d47c`](https://github.com/hadrien/FastSQLA/commit/931d47cc5ad7cca9b9cfb877b2b9b334763f4178))
+
+- Use singular plugin directory ([#114](https://github.com/hadrien/FastSQLA/pull/114),
+  [`ef1a5c3`](https://github.com/hadrien/FastSQLA/commit/ef1a5c33553d051336e6d07115f1b5624cb42593))
+
+- **beads**: Update config + save interactions
+  ([`4d94e0c`](https://github.com/hadrien/FastSQLA/commit/4d94e0c067c537451d7ae9f6e4f98827901b2723))
+
+- **deps-dev**: Bump pytest from 9.0.3 to 9.1.1
+  ([#124](https://github.com/hadrien/FastSQLA/pull/124),
+  [`581f636`](https://github.com/hadrien/FastSQLA/commit/581f6362f5ea4bc114e0a5e2a54542ce38286457))
+
+- **deps-dev**: Bump ruff from 0.15.16 to 0.16.0
+  ([#112](https://github.com/hadrien/FastSQLA/pull/112),
+  [`37a0b8f`](https://github.com/hadrien/FastSQLA/commit/37a0b8fb03c6b6b1232b2af9485bdb6b1bc647e2))
+
+### Continuous Integration
+
+- Fix Dependabot Actions cooldown ([#119](https://github.com/hadrien/FastSQLA/pull/119),
+  [`7414aec`](https://github.com/hadrien/FastSQLA/commit/7414aeca9217a27d6fd45e0766e833d661f32612))
+
+- **deps**: Bump actions/checkout from 4 to 7 ([#120](https://github.com/hadrien/FastSQLA/pull/120),
+  [`9b36996`](https://github.com/hadrien/FastSQLA/commit/9b369966c3b1dca3fa337426a1d47704bd95f4d5))
+
+### Documentation
+
+- Improve coding-agent discovery ([#107](https://github.com/hadrien/FastSQLA/pull/107),
+  [`11858db`](https://github.com/hadrien/FastSQLA/commit/11858dbfe83beed2cacd40382ab4abd547f6a7aa))
+
+### Features
+
+- Rename pagination default page-size option ([#127](https://github.com/hadrien/FastSQLA/pull/127),
+  [`2419e9e`](https://github.com/hadrien/FastSQLA/commit/2419e9ee8fcbf8e67bd832c191df2937393b211a))
+
+
 ## v0.7.8 (2026-07-17)
 
 ### Bug Fixes
diff --git a/pyproject.toml b/pyproject.toml
index 09bc3ad..cf9c7e6 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "FastSQLA"
-version = "0.7.8"
+version = "0.8.0"
 description = "SQLAlchemy extension for FastAPI that supports asynchronous sessions and includes built-in pagination."
 readme = "README.md"
 requires-python = ">=3.12"