docs(gh): update gh action tutorial

Author: woile

docs/tutorials/github_actions.md

@@ -38,44 +38,49 @@ To automatically execute `cz bump` in your CI and push the new commit and tag ba
 
 #### Step 3: Create the workflow file
 
-Create a new file `.github/workflows/bumpversion.yml` in your repository with the following content:
+Create a new file `.github/workflows/bump-version.yml` in your repository with the following content:
 
-```yaml title=".github/workflows/bumpversion.yml"
+```yaml title=".github/workflows/bump-version.yml"
 name: Bump version
 
 on:
   push:
     branches:
-      - master  # or 'main' if that's your default branch
+      - main
 
 jobs:
-  bump-version:
-    if: "!startsWith(github.event.head_commit.message, 'bump:')"
+  bump:
     runs-on: ubuntu-latest
-    name: "Bump version and create changelog with commitizen"
+    permissions:
+      contents: write
+      actions: write
     steps:
-      - name: Check out
-        uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           token: "${{ secrets.PERSONAL_ACCESS_TOKEN }}"
           fetch-depth: 0
-      - name: Create bump and changelog
-        uses: commitizen-tools/commitizen-action@master
+          fetch-tags: true
+      - uses: commitizen-tools/setup-cz@main
         with:
-          github_token: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
+          python-version: "3.x"
+      - id: bump-version
+        run: |
+          cz bump --yes --annotated-tag
+          git push --follow-tags
 ```
 
 #### How it works
 
-- **Trigger**: The workflow runs on every push to the `master` branch (or `main` if you change it)
-- **Conditional check**: The `if` condition prevents infinite loops by skipping the job if the commit message starts with `bump:`
-- **Checkout**: Uses your personal access token to check out the repository with full history (`fetch-depth: 0`)
-- **Bump**: The `commitizen-action` automatically:
+- **Trigger**: The workflow runs on every push to the `main` branch (or `master` if that's your default branch)
+- **Permissions**: The job requests `contents: write` and `actions: write` so it can push the bump commit and tag, and trigger dependent workflows
+- **Checkout**: Uses your personal access token to check out the repository with full history (`fetch-depth: 0`) and all tags (`fetch-tags: true`)
+- **Setup**: The `setup-cz` action installs the Commitizen CLI with the requested Python version
+- **Bump**: The `cz bump --yes --annotated-tag` command automatically:
     - Determines the version increment based on your commit messages
     - Updates version files (as configured in your `pyproject.toml` or other config)
-    - Creates a new git tag
+    - Creates a new annotated git tag
     - Generates/updates the changelog
-    - Pushes the commit and tag back to the repository
+- **Push**: `git push --follow-tags` pushes the bump commit along with the new tag back to the repository
 
 Once you push this workflow file to your repository, it will automatically run on the next push to your default branch.