ci: skip verifyRelease in prepare-release dry-run and add changelog

[SamuelSSalazar]

By submitting a PR to this repository, you agree to the terms within the Auth0 Code of Conduct. Please see the contributing guidelines for how to create and submit a high-quality PR for this repo.

Description

Fixes the Prepare Release workflow, two bugs introduced by #122

The Detect Next Version step ran semantic-release --dry-run --verify-conditions false. That flag only skips the verifyConditions step. The verifyRelease step still executed the @semantic-release/exec plugin's verifyReleaseCmd, which runs npm pack and then rl-wrapper. As a result:

• rl-wrapper: not found : that binary is only installed inrelease.yml, not prepare-release.yml, so the step errored.
• A stray .tgz in the release PR : npm pack left xml-encryption-*.tgz in the workspace, which create-pull-request then committed into the release PR (see chore(release): 4.0.1 #130 vs. the clean chore(release): 4.0.0 #124).

This PR fixes both issues by adding --verify-release false so the dry-run only runs analyzeCommits (still using the conventionalcommits preset from .releaserc.json), and never triggers npm pack / rl-wrapper.

This PR also adds a CHANGELOG.md generation step and hardens Detect Next Version to fail the step on a non-zero semantic-release exit instead of masking it behind the awk pipe.

Testing

Ran the dry-run command locally and verified that:

• Version detection works: The next release version is 4.0.1 is printed and captured by the awk pipeline.
• No .tgz is created.
• No rl-wrapper invocation.
• CHANGELOG.md is updated with a new conventionalcommits-formatted section, preserving prior entries.

[github-actions]

🎉 This PR is included in version 4.0.1 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀