run-patch-release #221
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: run-patch-release | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| version: | |
| description: 'The new patch release version (semver: major.minor.patch). Example: if versions should be bumped to 9.3.1, use 9.3.1.' | |
| required: true | |
| type: string | |
| # Avoid concurrency so we can watch the releases correctly | |
| concurrency: | |
| group: ${{ github.workflow }} | |
| permissions: | |
| contents: read | |
| env: | |
| JOB_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }} | |
| SLACK_CHANNEL: "#apm-server" | |
| jobs: | |
| prepare: | |
| runs-on: ubuntu-latest | |
| outputs: | |
| release-branch: ${{ steps.prepare.outputs.release-branch }} | |
| release-type: ${{ steps.prepare.outputs.release-type }} | |
| release-version: ${{ steps.prepare.outputs.release-version }} | |
| slack-thread: ${{ steps.prepare.outputs.slack-thread }} | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - id: prepare | |
| uses: ./.github/workflows/prepare-release | |
| with: | |
| slack-bot-token: ${{ secrets.SLACK_BOT_TOKEN }} | |
| version: ${{ inputs.version }} | |
| type: 'patch' | |
| run-patch: | |
| runs-on: ubuntu-latest | |
| needs: [ prepare ] | |
| env: | |
| RELEASE_BRANCH: ${{ needs.prepare.outputs.release-branch }} | |
| RELEASE_TYPE: ${{ needs.prepare.outputs.release-type }} | |
| steps: | |
| - name: Get token | |
| id: get_token | |
| uses: actions/create-github-app-token@v3 | |
| with: | |
| app-id: ${{ secrets.OBS_AUTOMATION_APP_ID }} | |
| private-key: ${{ secrets.OBS_AUTOMATION_APP_PEM }} | |
| permission-contents: write | |
| permission-pull-requests: write | |
| - uses: actions/checkout@v7 | |
| with: | |
| # 0 indicates all history for all branches and tags. | |
| fetch-depth: 0 | |
| token: ${{ steps.get_token.outputs.token }} | |
| # Required to use a service account, otherwise PRs created by | |
| # GitHub bot won't trigger any CI builds. | |
| # See https://github.com/peter-evans/create-pull-request/issues/48#issuecomment-537478081 | |
| - name: Configure git user | |
| uses: elastic/oblt-actions/git/setup@v1 | |
| with: | |
| github-token: ${{ steps.get_token.outputs.token }} | |
| - name: Import GPG key | |
| uses: crazy-max/ghaction-import-gpg@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd # v7.0.0 | |
| with: | |
| gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }} | |
| passphrase: ${{ secrets.GPG_PASSPHRASE }} | |
| git_user_signingkey: true | |
| git_commit_gpgsign: true | |
| - run: make patch-release | |
| env: | |
| GH_TOKEN: ${{ steps.get_token.outputs.token }} | |
| BUMP_VERSION: ${{ needs.prepare.outputs.release-version }} | |
| - if: success() | |
| uses: elastic/oblt-actions/slack/send@v1 | |
| with: | |
| bot-token: ${{ secrets.SLACK_BOT_TOKEN }} | |
| channel-id: ${{ env.SLACK_CHANNEL }} | |
| message: |- | |
| PRs to bump versions in `${{ github.repository }}@${{ env.RELEASE_BRANCH }}` branch to `${{ needs.prepare.outputs.release-version }}` have been created. | |
| :pr: <https://github.com/elastic/apm-server/pulls?q=is%3Apr+is%3Aopen+label%3Arelease|Open release PRs> | |
| thread-timestamp: ${{ needs.prepare.outputs.slack-thread || '' }} | |
| - if: failure() | |
| uses: elastic/oblt-actions/slack/send@v1 | |
| with: | |
| bot-token: ${{ secrets.SLACK_BOT_TOKEN }} | |
| channel-id: ${{ env.SLACK_CHANNEL }} | |
| message: |- | |
| :fire: Something went wrong with the patch release. See <${{ env.JOB_URL }}|logs>. | |
| thread-timestamp: ${{ needs.prepare.outputs.slack-thread || '' }} |