Update the release workflow to ensure that the POM bundled in the soruce code release includes the DSL version override

Author: dschwartz-ftadvisory

.github/workflows/release.yml

@@ -119,19 +119,18 @@ jobs:
       - name: Bump version, tag, and push (skipped in dry run)
         env:
           TAG_NAME: ${{ steps.set_tag.outputs.tag_name }}
+          DSL_VERSION: ${{ steps.get_dsl_version.outputs.dsl_version }}
+          DSL_VERSION_OVERRIDE: ${{ github.event.inputs.dsl_version }}
           DRY_RUN: ${{ github.event.inputs.dry_run }}
           BASE_REF: ${{ github.event.inputs.base_ref || 'main' }}
         shell: bash
         run: |
           set -euo pipefail
           if [ "${DRY_RUN}" = "true" ]; then
-            echo "[DRY RUN] Would set project version to ${TAG_NAME}, commit, tag, and push atomically to ${BASE_REF}."
+            echo "[DRY RUN] Would tag ${TAG_NAME} and push."
             exit 0
           fi
 
-           # We skip committing changes to the repo. Use versions:set only in the build step ephemerally.
-           echo "Skipping persistent version bump in pom.xml to avoid branch protection issues."
-
           git config --global user.email "github-actions[bot]@users.noreply.github.com"
           git config --global user.name "github-actions[bot]"
           git fetch --prune --tags origin
@@ -140,8 +139,21 @@ jobs:
             exit 1
           fi
 
-          git tag -a "${TAG_NAME}" -m "Release ${TAG_NAME}"
-          git push --atomic origin HEAD:"${BASE_REF}" "${TAG_NAME}"
+          if [ -n "${DSL_VERSION_OVERRIDE}" ]; then
+            # Update pom.xml so the source at the tag reflects the overridden DSL version.
+            # Commit stays off main — only the tag is pushed.
+            mvn -q -B versions:set-property \
+              -Dproperty=rosetta.dsl.version \
+              -DnewVersion="${DSL_VERSION}" \
+              -DgenerateBackupPoms=false
+            git add pom.xml
+            git commit -m "chore: set rosetta.dsl.version=${DSL_VERSION} for release ${TAG_NAME}"
+            git tag -a "${TAG_NAME}" -m "Release ${TAG_NAME}"
+            git push origin "${TAG_NAME}"
+          else
+            git tag -a "${TAG_NAME}" -m "Release ${TAG_NAME}"
+            git push --atomic origin HEAD:"${BASE_REF}" "${TAG_NAME}"
+          fi
 
   build-and-verify-release:
     needs: prepare-release