.github: workflows: rebase-and-build.yml: add

Signed-off-by: Danil Klimuk <daniil.klimuk@3mdeb.com>

Author: DaniilKl

.github/workflows/build-and-publish-rebased.yml

@@ -0,0 +1,29 @@
+name: Build the last successful automatic rebase of main branch
+
+on:
+  create:
+    branches:
+      - 'tb-dev-rebased'
+
+jobs:
+  qubes-dom0-package:
+    uses: TrenchBoot/.github/.github/workflows/qubes-dom0-packagev2.yml@master
+    with:
+      qubes-component: 'grub2'
+      qubes-pkg-src-dir: '.'
+      qubes-pkg-version: '2.13'
+  trigger-gitea-cicd:
+    needs: antievilmaid
+    uses: TrenchBoot/.github/.github/workflows/trigger-woodpecker-pipeline.yml@master
+    secrets:
+      woodpecker-token: ${{ secrets.WOODPECKER_TOKEN }}
+    with:
+      api-url:  'https://ci.3mdeb.com'
+      owner:    'zarhus'
+      repo:     'trenchboot-release-cicd-pipeline'
+      ref:      'sign-and-publish-rc-rpms'
+      inputs: >-
+        --input GITHUB_REPO=grub
+        --input GITHUB_SHA=${{ github.sha }}
+        --input GITHUB_RUN_ID=${{ github.run_id }}
+        --input QUBES_COMPONENT=grub2

.github/workflows/rebase.yml

@@ -0,0 +1,23 @@
+name: Rebase on top of QubesOS main and build RPMs
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 0 * * 6'
+
+jobs:
+  try-rebase:
+    uses: TrenchBoot/.github/.github/workflows/rebase.yml@add-rebase-script
+    secrets:
+      first-remote-token: ${{secrets.TOKEN}}
+    permissions:
+      # For creation/deletion/pushing to branches and creating PRs
+      contents: write
+    with:
+      downstream-repo: 'https://github.com/trenchboot/grub.git'
+      downstream-branch: 'tb-dev'
+      upstream-repo: 'https://github.com/QubesOS/qubes-grub2.git'
+      upstream-branch: 'main'
+      commit-user-name: 'github-actions[bot]'
+      commit-user-email: 'github-actions[bot]@users.noreply.github.com'
+      cicd-trigger-resume: '7. Rerun the workflow https://github.com/trenchboot/grub/actions/runs/${{ github.run_id }} to resume automated rebase.'