docs: backfill 0.3.1 changelog and pin release checkout to main

.github/workflows/release.yml

@@ -30,9 +30,16 @@ jobs:
       # Check out over SSH using the release deploy key. The key has write
       # access and is on the `main` ruleset bypass list, so the version-bump
       # commit and tag can push directly even with branch protection on.
+      #
+      # `ref: main` is required: without it, a workflow_dispatch checkout can
+      # land on a detached HEAD, so release-it's version-bump + CHANGELOG commit
+      # is tagged and published but never pushed back onto `main` (the tag ends
+      # up on no branch). Pinning the branch keeps the tag and `main` aligned so
+      # the CHANGELOG stays in sync with the released version.
       - name: Checkout
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
+          ref: main
           fetch-depth: 0
           ssh-key: ${{ secrets.RELEASE_DEPLOY_KEY }}
 

CHANGELOG.md

@@ -2,6 +2,21 @@
 
 ## [0.3.1](https://github.com/thoughtbot/react-native-social-auth/compare/v0.3.0...v0.3.1) (2026-10-04)
 
+
+### Features
+
+* make `react-native-svg` an optional peer dependency ([#6](https://github.com/thoughtbot/react-native-social-auth/issues/6)) ([a267a15](https://github.com/thoughtbot/react-native-social-auth/commit/a267a15905e4d1efbd817825c70d1f21a27a2b7a))
+
+
+### BREAKING CHANGES
+
+* `GoogleSignInButton` is no longer exported from the package root. Import it from the `@thoughtbot/react-native-social-auth/google-button` subpath instead, and install `react-native-svg` (now optional) only if you use the button:
+
+```diff
+- import { GoogleSignInButton } from '@thoughtbot/react-native-social-auth';
++ import { GoogleSignInButton } from '@thoughtbot/react-native-social-auth/google-button';
+```
+
 # [0.3.0](https://github.com/thoughtbot/react-native-social-auth/compare/v0.2.0...v0.3.0) (2026-09-14)