create-release-pr.yml

# This GitHub Workflow will create a new release branch that contains the updated C# project versions and changelog.
# The workflow will also create a PR that targets `dev` from the release branch.
name: Create Release PR

# This workflow is manually triggered when in preparation for a release. The workflow should be dispatched from the `dev` branch.
on:
  workflow_dispatch:
    inputs:
      OVERRIDE_VERSION:
        description: "Override Version"
        type: string
        required: false

permissions:
  id-token: write
  repository-projects: read

jobs:
  release-pr:
    name: Release PR
    runs-on: ubuntu-latest

    env:
      INPUT_OVERRIDE_VERSION: ${{ github.event.inputs.OVERRIDE_VERSION }}

    steps:
      # Assume an AWS Role that provides access to the Access Token
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7  # v6.0.0
        with:
          role-to-assume: ${{ secrets.RELEASE_WORKFLOW_ACCESS_TOKEN_ROLE_ARN }}
          aws-region: us-west-2
      # Retrieve the per-repo deploy key + FG PAT from Secrets Manager
      - name: Retrieve secrets from AWS Secrets Manager
        uses: aws-actions/aws-secretsmanager-get-secrets@3a411b6ec5cace3d626412dd917e7bfeac242cfa #v3.0.0
        with:
          secret-ids: |
            DEPLOY_KEY, prod/devops/aws-lambda-dotnet-deploy-key
            FG_PAT, prod/devops/aws-lambda-dotnet-fg-pat
      # Checkout a full clone of the repo using the deploy key (push runs over SSH)
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
        with:
          fetch-depth: "0"
          ssh-key: ${{ env.DEPLOY_KEY }}
      # Install .NET9 which is needed for AutoVer
      - name: Setup .NET 9.0
        uses: actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309  # v5.1.0
        with:
          dotnet-version: 9.0.x
      # Install .NET10 which is needed for building the solution
      - name: Setup .NET 10.0
        uses: actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309  # v5.1.0
        with:
          dotnet-version: 10.0.x
      # Install .NET11 which is needed for building the solution
      - name: Setup .NET 11.0
        uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 #v5.2.0
        with:
          dotnet-version: 11.0.x
      # Install AutoVer to automate versioning and changelog creation
      - name: Install AutoVer
        run: dotnet tool install --global AutoVer --version 0.0.25
      # Set up a git user to be able to run git commands later on
      - name: Setup Git User
        run: |
          git config --global user.email "github-aws-sdk-dotnet-automation@amazon.com"
          git config --global user.name "aws-sdk-dotnet-automation"
      # Create the release branch which will contain the version changes and updated changelog
      - name: Create Release Branch
        id: create-release-branch
        run: |
          branch=releases/next-release
          git checkout -b $branch
          echo "BRANCH=$branch" >> $GITHUB_OUTPUT
      # Update the version of projects based on the change files
      - name: Increment Version
        run: autover version
        if: env.INPUT_OVERRIDE_VERSION == ''
      # Update the version of projects based on the override version
      - name: Increment Version
        run: autover version --use-version "$INPUT_OVERRIDE_VERSION"
        if: env.INPUT_OVERRIDE_VERSION != ''
      # Build the solution for the Source Generator to update the CloudFormation templates
      - name: Commit Template Changes
        run: |
          dotnet build Libraries/Libraries.sln -c Release
          git add "*.template"

          if git diff --cached --quiet; then
            echo "No .template files were staged; skipping commit."
          else
            git commit -m "Update test app CloudFormation templates"
          fi
      # Update the changelog based on the change files
      - name: Update Changelog
        run: autover changelog
      # Push the release branch up as well as the created tag
      - name: Push Changes
        run: |
          branch=${{ steps.create-release-branch.outputs.BRANCH }}
          git push origin $branch
          git push origin $branch --tags
      # Get the release name that will be used to create a PR
      - name: Read Release Name
        id: read-release-name
        run: |
          version=$(autover changelog --release-name)
          echo "VERSION=$version" >> $GITHUB_OUTPUT
      # Get the changelog that will be used to create a PR
      - name: Read Changelog
        id: read-changelog
        run: |
          changelog=$(autover changelog --output-to-console)
          echo "CHANGELOG<<EOF"$'\n'"$changelog"$'\n'EOF >> "$GITHUB_OUTPUT"
      # Create the Release PR and label it
      - name: Create Pull Request
        env:
          GITHUB_TOKEN: ${{ env.FG_PAT }}
        run: |
          pr_url="$(gh pr create --title "${{ steps.read-release-name.outputs.VERSION }}" --body "${{ steps.read-changelog.outputs.CHANGELOG }}" --base dev --head ${{ steps.create-release-branch.outputs.BRANCH }})"
          gh label create "Release PR" --description "A Release PR that includes versioning and changelog changes" -c "#FF0000" -f
          gh pr edit $pr_url --add-label "Release PR"