diff --git a/.github/workflows/bump-minor-version.yml b/.github/workflows/bump-minor-version.yml index 1048154cc..9a8a641e5 100644 --- a/.github/workflows/bump-minor-version.yml +++ b/.github/workflows/bump-minor-version.yml @@ -16,7 +16,7 @@ jobs: uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 with: fetch-depth: 0 # Required to get all tags for versioning - token: ${{ secrets.GITHUB_TOKEN }} + token: ${{ secrets.OBOL_PLATFORM_PAT }} - name: 2. Import GPG key env: @@ -37,7 +37,7 @@ jobs: id: bump uses: mathieudutour/github-tag-action@a22cf08638b34d5badda920f9daf6e72c477b07b # v6.2 with: - github_token: ${{ secrets.GITHUB_TOKEN }} + github_token: ${{ secrets.OBOL_PLATFORM_PAT }} # NOTE: This workflow ignores conventional commit messages and always bumps the minor version. default_bump: minor # Will go from v1.7.X -> v1.8.0 dry_run: true # Don't create tag yet, just calculate the new version @@ -93,7 +93,6 @@ jobs: # The release branch is already checked out; no need to checkout again. - echo "::notice::Created and pushed release branch: $RELEASE_BRANCH" - name: 7. Modify App Version in Code @@ -114,7 +113,7 @@ jobs: - name: 8. Create Pull Request to Release Branch uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0 with: - token: ${{ secrets.GITHUB_TOKEN }} + token: ${{ secrets.OBOL_PLATFORM_PAT }} commit-message: "app: bump minor version to ${{ steps.vars.outputs.NEW_V_VERSION }}" committer: "obol-platform " author: "obol-platform " @@ -137,3 +136,25 @@ jobs: category: misc ticket: none + + - name: 9. Output Summary + if: always() + run: | + cat << EOF >> $GITHUB_STEP_SUMMARY + ## Minor Release Process Initiated + + ### Details + - **Previous Release:** \`${{ steps.bump.outputs.previous_tag }}\` + - **New Release Branch:** \`${{ steps.vars.outputs.RELEASE_BRANCH }}\` + - **New Version:** \`${{ steps.vars.outputs.NEW_V_VERSION }}\` + + ### Next Steps + 1. Review and merge the created PR to \`${{ steps.vars.outputs.RELEASE_BRANCH }}\` + 2. After merge, run the "Tag Minor Release Candidate" workflow + 3. Test the release candidate thoroughly (Kurtosis, Hoodi environments, etc.) + 4. If successful, proceed with "Prepare Minor Full Release" workflow + 5. After stable PR is merged to release branch, run "Tag Minor Full Release" workflow + 6. Finally, merge the dev version PR to \`main\` to start the next development cycle + + **Note:** This workflow is for minor releases (vX.Y.0). Patch releases (vX.Y.Z) use a different workflow. + EOF diff --git a/.github/workflows/bump-patch-version.yml b/.github/workflows/bump-patch-version.yml index a1177b549..9b3397175 100644 --- a/.github/workflows/bump-patch-version.yml +++ b/.github/workflows/bump-patch-version.yml @@ -16,7 +16,7 @@ jobs: uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 with: fetch-depth: 0 # Required to get all tags for versioning - token: ${{ secrets.GITHUB_TOKEN }} + token: ${{ secrets.OBOL_PLATFORM_PAT }} persist-credentials: false - name: 2. Import GPG key @@ -150,7 +150,7 @@ jobs: - name: 7. Create Pull Request to Release Branch uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0 with: - token: ${{ secrets.GITHUB_TOKEN }} + token: ${{ secrets.OBOL_PLATFORM_PAT }} commit-message: "app: bump patch version to ${{ steps.vars.outputs.NEW_V_VERSION }}" committer: "obol-platform " author: "obol-platform " diff --git a/.github/workflows/prepare-minor-full-release.yml b/.github/workflows/prepare-minor-full-release.yml index c2a2a2c95..8599728fa 100644 --- a/.github/workflows/prepare-minor-full-release.yml +++ b/.github/workflows/prepare-minor-full-release.yml @@ -19,7 +19,7 @@ jobs: uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 with: fetch-depth: 0 # Required to get all tags and branches - token: ${{ secrets.GITHUB_TOKEN }} + token: ${{ secrets.OBOL_PLATFORM_PAT }} - name: 2. Import GPG key env: @@ -150,7 +150,7 @@ jobs: id: create_stable_pr uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0 with: - token: ${{ secrets.GITHUB_TOKEN }} + token: ${{ secrets.OBOL_PLATFORM_PAT }} commit-message: "app/version: bump v${{ steps.version.outputs.MAJOR }}.${{ steps.version.outputs.MINOR }} to stable" committer: "obol-platform " author: "obol-platform " @@ -213,7 +213,7 @@ jobs: id: create_dev_pr uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0 with: - token: ${{ secrets.GITHUB_TOKEN }} + token: ${{ secrets.OBOL_PLATFORM_PAT }} commit-message: "app: bump version to ${{ steps.version.outputs.NEXT_DEV_VERSION }}" committer: "obol-platform " author: "obol-platform " diff --git a/.github/workflows/prepare-patch-full-release.yml b/.github/workflows/prepare-patch-full-release.yml index daffad2d6..e297ac983 100644 --- a/.github/workflows/prepare-patch-full-release.yml +++ b/.github/workflows/prepare-patch-full-release.yml @@ -16,7 +16,7 @@ jobs: uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 with: fetch-depth: 0 # Required to get all tags and branches - token: ${{ secrets.GITHUB_TOKEN }} + token: ${{ secrets.OBOL_PLATFORM_PAT }} persist-credentials: false - name: 2. Import GPG key @@ -172,7 +172,7 @@ jobs: id: create_stable_pr uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0 with: - token: ${{ secrets.GITHUB_TOKEN }} + token: ${{ secrets.OBOL_PLATFORM_PAT }} commit-message: "app/version: bump v${{ steps.version.outputs.MAJOR }}.${{ steps.version.outputs.MINOR }} to stable" committer: "obol-platform " author: "obol-platform " diff --git a/.github/workflows/tag-minor-full-release.yml b/.github/workflows/tag-minor-full-release.yml index 1b4da57a6..6a0cf17b8 100644 --- a/.github/workflows/tag-minor-full-release.yml +++ b/.github/workflows/tag-minor-full-release.yml @@ -28,7 +28,7 @@ jobs: uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 with: fetch-depth: 0 # Required to get all tags and branches - token: ${{ secrets.GITHUB_TOKEN }} + token: ${{ secrets.OBOL_PLATFORM_PAT }} - name: 2. Import GPG key env: @@ -126,6 +126,8 @@ jobs: - name: 7. Create and Push Tag id: create_and_push_tag + env: + GITHUB_TOKEN: ${{ secrets.OBOL_PLATFORM_PAT }} run: | TAG_VERSION="${{ steps.version.outputs.TAG_VERSION }}" RELEASE_BRANCH="${{ steps.find_branch.outputs.RELEASE_BRANCH }}" diff --git a/.github/workflows/tag-minor-release-candidate.yml b/.github/workflows/tag-minor-release-candidate.yml index 29b919830..ef1b81f8b 100644 --- a/.github/workflows/tag-minor-release-candidate.yml +++ b/.github/workflows/tag-minor-release-candidate.yml @@ -15,7 +15,7 @@ jobs: uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 with: fetch-depth: 0 # Required to get all tags and branches - token: ${{ secrets.GITHUB_TOKEN }} + token: ${{ secrets.OBOL_PLATFORM_PAT }} - name: 2. Import GPG key env: @@ -55,7 +55,7 @@ jobs: # Checkout the release branch git checkout "$RELEASE_BRANCH" - - name: 3. Extract Version from Branch Name + - name: 4. Extract Version from Branch Name id: version run: | BRANCH="${{ steps.find_branch.outputs.RELEASE_BRANCH }}" @@ -76,7 +76,7 @@ jobs: echo "::notice::Extracted version prefix: ${VERSION_PREFIX}" - - name: 3. Find Latest Release Candidate + - name: 5. Find Latest Release Candidate id: latest_rc run: | VERSION_PREFIX="${{ steps.version.outputs.VERSION_PREFIX }}" @@ -104,7 +104,10 @@ jobs: echo "::notice::New release candidate tag will be: ${NEW_TAG}" - - name: 5. Create and Push Tag + - name: 6. Create and Push Tag + id: create_and_push_tag + env: + GITHUB_TOKEN: ${{ secrets.OBOL_PLATFORM_PAT }} run: | NEW_TAG="${{ steps.latest_rc.outputs.NEW_TAG }}" @@ -116,7 +119,7 @@ jobs: echo "::notice::Successfully created and pushed tag: $NEW_TAG" - - name: 5. Output Summary + - name: 7. Output Summary run: | cat << EOF >> $GITHUB_STEP_SUMMARY ## Minor Release Candidate Tagged Successfully diff --git a/.github/workflows/tag-patch-full-release.yml b/.github/workflows/tag-patch-full-release.yml index 0161f8599..fecea66a3 100644 --- a/.github/workflows/tag-patch-full-release.yml +++ b/.github/workflows/tag-patch-full-release.yml @@ -28,7 +28,7 @@ jobs: uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 with: fetch-depth: 0 # Required to get all tags and branches - token: ${{ secrets.GITHUB_TOKEN }} + token: ${{ secrets.OBOL_PLATFORM_PAT }} - name: 2. Import GPG key env: @@ -158,6 +158,8 @@ jobs: - name: 8. Create and Push Tag id: create_and_push_tag + env: + GITHUB_TOKEN: ${{ secrets.OBOL_PLATFORM_PAT }} run: | TAG_VERSION="${{ steps.find_patch.outputs.TAG_VERSION }}" RELEASE_BRANCH="${{ steps.find_branch.outputs.RELEASE_BRANCH }}" diff --git a/.github/workflows/tag-patch-release-candidate.yml b/.github/workflows/tag-patch-release-candidate.yml index bc16ab303..496eba5a5 100644 --- a/.github/workflows/tag-patch-release-candidate.yml +++ b/.github/workflows/tag-patch-release-candidate.yml @@ -15,7 +15,7 @@ jobs: uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 with: fetch-depth: 0 # Required to get all tags and branches - token: ${{ secrets.GITHUB_TOKEN }} + token: ${{ secrets.OBOL_PLATFORM_PAT }} - name: 2. Import GPG key env: @@ -55,7 +55,7 @@ jobs: # Checkout the release branch git checkout "$RELEASE_BRANCH" - - name: 3. Extract Version from Branch Name + - name: 4. Extract Version from Branch Name id: version run: | BRANCH="${{ steps.find_branch.outputs.RELEASE_BRANCH }}" @@ -136,8 +136,10 @@ jobs: echo "::notice::New release candidate tag will be: ${NEW_TAG}" - - name: 7. Create and Push Tag + - name: 6. Create and Push Tag id: create_tag + env: + GITHUB_TOKEN: ${{ secrets.OBOL_PLATFORM_PAT }} run: | NEW_TAG="${{ steps.latest_rc.outputs.NEW_TAG }}"