SLE-1498 Add DevEx automated release workflow (#1052)

Author: nquinquenel

.github/workflows/full-release.yml

@@ -0,0 +1,75 @@
+name: Full release
+
+on:
+  workflow_dispatch:
+    inputs:
+      short-description:
+        description: 'A short description for the release ticket'
+        required: true
+        type: string
+      branch:
+        description: 'The branch from which to release.'
+        required: false
+        default: 'master'
+        type: string
+      new-version:
+        description: 'New Jira version to create after the release (e.g. 10.9). Leave empty to auto-increment the last segment.'
+        required: false
+        type: string
+      dry-run:
+        description: 'Test mode: use Jira sandbox and create a draft GitHub release'
+        required: false
+        default: false
+        type: boolean
+
+jobs:
+  release:
+    name: Release
+    uses: SonarSource/release-github-actions/.github/workflows/ide-automated-release.yml@706e44289960d7768dc6f953bc1c0df003e812cb # 1.5.9
+    permissions:
+      statuses: read
+      id-token: write
+      contents: write
+      actions: write
+      pull-requests: write
+    with:
+      jira-project-key: "SLE"
+      project-name: "SonarLint for Eclipse"
+      short-description: ${{ inputs.short-description }}
+      branch: ${{ inputs.branch }}
+      slack-channel: "C02E6L5C01H"
+      is-test-run: ${{ inputs.dry-run }}
+      new-version: ${{ inputs.new-version }}
+
+  bump-version:
+    name: Bump Tycho version
+    needs: [release]
+    # Dry-run safety: never open a Tycho version-bump PR against master during a sandbox test
+    if: ${{ !inputs.dry-run && needs.release.result == 'success' }}
+    runs-on: github-ubuntu-latest-s
+    permissions:
+      contents: write
+      pull-requests: write
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          ref: ${{ inputs.branch }}
+
+      - name: Bump Tycho version
+        env:
+          NEW_VERSION: ${{ needs.release.outputs.new-version }}
+        run: |
+          NV="$NEW_VERSION"
+          # new-version is the Jira short version (X.Y for minor, X.Y.Z for patch — never 4-segment).
+          # Tycho requires 3-segment OSGi format: pad X.Y to X.Y.0; X.Y.Z passes through unchanged.
+          if [[ "$NV" =~ ^[0-9]+\.[0-9]+$ ]]; then NV="${NV}.0"; fi
+          mvn -B org.eclipse.tycho:tycho-versions-plugin:set-version \
+            -Dtycho.mode=maven -DnewVersion="${NV}-SNAPSHOT"
+
+      - uses: SonarSource/release-github-actions/create-pull-request@706e44289960d7768dc6f953bc1c0df003e812cb # 1.5.9
+        with:
+          commit-message: Prepare next development iteration ${{ needs.release.outputs.new-version }}
+          title: Prepare next development iteration ${{ needs.release.outputs.new-version }}
+          branch: bot/prepare-next-development-iteration-${{ needs.release.outputs.new-version }}
+          base: ${{ inputs.branch }}
+          reviewers: ${{ github.actor }}

.github/workflows/release.yml

@@ -5,14 +5,21 @@ on:
       version:
         description: 'Full version including build number, e.g. 1.2.3.456'
         required: true
+        type: string
+      dryRun:
+        description: 'Flag to enable the dry-run execution'
+        required: false
+        default: false
+        type: boolean
 
 jobs:
   sonar_release:
     permissions:
       id-token: write
       contents: write
-    uses: SonarSource/gh-action_release/.github/workflows/main.yaml@95ca260926950eedcc8c69437f9f12b6f0584de4 # v7.0.1
+    uses: SonarSource/gh-action_release/.github/workflows/main.yaml@95ca260926950eedcc8c69437f9f12b6f0584de4 # 7.0.1
     with:
       version: ${{ inputs.version }}
       publishToBinaries: true
+      dryRun: ${{ inputs.dryRun }}
       slackChannel: C02E6L5C01H # squad-devex-private