use standard github token for releases

.github/workflows/build-release-on-main-push.yml

@@ -19,7 +19,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           ref: main
-          token: ${{secrets.PAT_GH_CI}}
+#         token: ${{secrets.PAT_GH_CI}}
 
       - name: setup-jdk
         uses: actions/setup-java@v4
@@ -47,10 +47,20 @@ jobs:
           MAVEN_PASSWORD: ${{ secrets.OSSRH_TOKEN }}
           MAVEN_GPG_PASSPHRASE: ${{ secrets.OSSRH_GPG_SECRET_KEY_PASSWORD }}
 
+      - name: 'get-latest-tag'
+        id: 'get-latest-tag'
+        uses: "WyriHaximus/github-action-get-previous-tag@v1"
+
+      - name: create-release-notes
+        uses: softprops/action-gh-release@v2
+        with:
+          generate_release_notes: true
+          name: ${{ steps.get-latest-tag.outputs.tag }}
+
       - name: merge-main-to-dev
         run: |
           git fetch --unshallow
           git checkout dev
           git pull
           git merge --no-ff main -m "[release] auto-merge released main back to dev"
-          git push
+          git push