chore: check BREAKING changes in a maven release

Author: zhongkechen

.github/workflows/release_maven.yml

@@ -21,6 +21,7 @@ on:
 permissions:
   contents: write
   id-token: write
+  pull-requests: read
 
 env:
   AWS_REGION: us-west-2
@@ -34,6 +35,169 @@ jobs:
         uses: actions/checkout@v6
         with:
           fetch-depth: 0
+
+      - name: Determine previous release tag
+        id: previous_release
+        shell: bash
+        run: |
+          previous_tag="$(git tag --merged HEAD --list 'v*' --sort=-version:refname | head -n 1)"
+          if [ -z "$previous_tag" ]; then
+            echo "No previous release tag found. Skipping BREAKING change validation."
+            echo "tag=" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+
+          echo "Found previous release tag: $previous_tag"
+          echo "tag=$previous_tag" >> "$GITHUB_OUTPUT"
+
+      - name: Collect release commit SHAs
+        id: release_commits
+        if: steps.previous_release.outputs.tag != ''
+        shell: bash
+        run: |
+          {
+            echo "shas<<EOF"
+            git rev-list "${{ steps.previous_release.outputs.tag }}..HEAD"
+            echo "EOF"
+          } >> "$GITHUB_OUTPUT"
+
+      - name: Validate BREAKING changes require major version bump
+        if: steps.previous_release.outputs.tag != ''
+        uses: actions/github-script@v8
+        env:
+          PREVIOUS_TAG: ${{ steps.previous_release.outputs.tag }}
+          RELEASE_VERSION: ${{ github.event.inputs.release_version }}
+          RELEASE_COMMITS: ${{ steps.release_commits.outputs.shas }}
+        with:
+          script: |
+            const previousTag = process.env.PREVIOUS_TAG;
+            const releaseVersion = process.env.RELEASE_VERSION;
+            const commitShas = process.env.RELEASE_COMMITS
+              .split('\n')
+              .map((sha) => sha.trim())
+              .filter(Boolean);
+            const owner = context.repo.owner;
+            const repo = context.repo.repo;
+            const breakingLabel = 'BREAKING';
+
+            const parseMajor = (version) => {
+              const match = version.match(/^v?(\d+)\.\d+\.\d+(?:[-+].*)?$/);
+              if (!match) {
+                throw new Error(`Unable to parse semantic version from "${version}"`);
+              }
+              return Number.parseInt(match[1], 10);
+            };
+
+            const previousMajor = parseMajor(previousTag);
+            const releaseMajor = parseMajor(releaseVersion);
+
+            if (commitShas.length === 0) {
+              core.info(`No commits found between ${previousTag} and HEAD. Skipping BREAKING change validation.`);
+              return;
+            }
+
+            const prsByNumber = new Map();
+            const linkedIssuesByPullRequest = new Map();
+
+            for (const commitSha of commitShas) {
+              const { data: pullRequests } = await github.rest.repos.listPullRequestsAssociatedWithCommit({
+                owner,
+                repo,
+                commit_sha: commitSha,
+              });
+
+              for (const pullRequest of pullRequests) {
+                if (pullRequest.merged_at) {
+                  prsByNumber.set(pullRequest.number, pullRequest);
+                }
+              }
+            }
+
+            const hasBreakingLabel = (labels) =>
+              labels.some((label) => label.name?.toUpperCase() === breakingLabel);
+
+            const getLinkedIssues = async (pullRequestNumber) => {
+              if (linkedIssuesByPullRequest.has(pullRequestNumber)) {
+                return linkedIssuesByPullRequest.get(pullRequestNumber);
+              }
+
+              const query = `
+                query($owner: String!, $repo: String!, $number: Int!) {
+                  repository(owner: $owner, name: $repo) {
+                    pullRequest(number: $number) {
+                      closingIssuesReferences(first: 50) {
+                        nodes {
+                          number
+                          labels(first: 50) {
+                            nodes {
+                              name
+                            }
+                          }
+                        }
+                      }
+                    }
+                  }
+                }
+              `;
+
+              const result = await github.graphql(query, {
+                owner,
+                repo,
+                number: pullRequestNumber,
+              });
+              const linkedIssues =
+                result.repository.pullRequest.closingIssuesReferences.nodes.map((issue) => ({
+                  number: issue.number,
+                  labels: issue.labels.nodes,
+                }));
+
+              linkedIssuesByPullRequest.set(pullRequestNumber, linkedIssues);
+              return linkedIssues;
+            };
+
+            const breakingPullRequests = [];
+
+            for (const pullRequest of prsByNumber.values()) {
+              const prHasBreakingLabel = hasBreakingLabel(pullRequest.labels);
+              const linkedIssues = await getLinkedIssues(pullRequest.number);
+              const breakingIssues = linkedIssues.filter((issue) => hasBreakingLabel(issue.labels));
+
+              if (prHasBreakingLabel || breakingIssues.length > 0) {
+                breakingPullRequests.push({
+                  number: pullRequest.number,
+                  breakingIssues,
+                });
+              }
+            }
+
+            if (breakingPullRequests.length === 0) {
+              core.info(`No BREAKING-labeled pull requests or linked issues found since ${previousTag}.`);
+              return;
+            }
+
+            const formatBreakingReferences = (pullRequest) => {
+              const issueSuffix =
+                pullRequest.breakingIssues.length === 0
+                  ? ''
+                  : ` (linked issues: ${pullRequest.breakingIssues.map((issue) => `#${issue.number}`).join(', ')})`;
+
+              return `#${pullRequest.number}${issueSuffix}`;
+            };
+
+            if (releaseMajor > previousMajor) {
+              core.info(
+                `Found BREAKING-labeled pull requests or linked issues (${breakingPullRequests
+                  .map(formatBreakingReferences)
+                  .join(', ')}), and release version ${releaseVersion} bumps the major version from ${previousMajor} to ${releaseMajor}.`
+              );
+              return;
+            }
+
+            core.setFailed(
+              `Release ${releaseVersion} includes BREAKING-labeled pull requests or linked issues (${breakingPullRequests
+                .map(formatBreakingReferences)
+                .join(', ')}) since ${previousTag}, but the major version was not bumped from ${previousMajor}.`
+            );
   
       - name: Setup Java
         uses: actions/setup-java@v5