[CNSL-1935] Add version bump workflow

Added GitHub Actions workflow that automatically creates and merges version
bump PRs when pending-deploy-* branches are merged to main. The workflow
updates CHANGELOG.md, internal/spec/config.yaml, and README.md with the
new version.

Co-Authored-By: roachdev-claude <roachdev-claude-bot@cockroachlabs.com>

Author: linhcrl

.github/workflows/finalize-release.yml

@@ -0,0 +1,76 @@
+name: Finalize Release
+
+on:
+  pull_request:
+    types: [closed]
+    branches:
+      - main
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  update-version:
+    # Only run if PR was merged and source branch starts with pending-deploy-
+    if: github.event.pull_request.merged && startsWith(github.event.pull_request.head.ref, 'pending-deploy-')
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+        with:
+          ref: main
+
+      - name: Extract release version
+        id: extract-version
+        uses: cockroachdb/actions/release-version-extract@v0
+
+      - name: Configure git
+        if: steps.extract-version.outputs.has_unreleased == 'true'
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+      - name: Create branch and update version
+        if: steps.extract-version.outputs.has_unreleased == 'true'
+        run: |
+          git checkout -b "update-version-${{ steps.extract-version.outputs.next_version }}"
+          bash internal/update-version.sh "${{ steps.extract-version.outputs.next_version }}"
+
+      - name: Commit and push changes
+        if: steps.extract-version.outputs.has_unreleased == 'true'
+        run: |
+          if [[ -z "$(git status --porcelain)" ]]; then
+            echo "No changes to commit"
+            exit 1
+          fi
+
+          # Extract changelog entries for this version
+          changelog_body=$(awk '
+            /^## \[${{ steps.extract-version.outputs.next_version }}\]/ {flag=1; next}
+            /^## \[/ {flag=0}
+            flag
+          ' CHANGELOG.md | sed '/^$/d')
+
+          git add .
+          git commit -m "Release v${{ steps.extract-version.outputs.next_version }}" \
+            -m "$changelog_body" \
+            -m "Co-Authored-By: roachdev-claude <roachdev-claude-bot@cockroachlabs.com>"
+          git push origin "update-version-${{ steps.extract-version.outputs.next_version }}"
+
+      - name: Create Pull Request and enable auto-merge
+        if: steps.extract-version.outputs.has_unreleased == 'true'
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          pr_body="## Summary
+          - Updates version to ${{ steps.extract-version.outputs.next_version }}
+          - Updates CHANGELOG.md, internal/spec/config.yaml, and README.md"
+
+          gh pr create \
+            --title "Release v${{ steps.extract-version.outputs.next_version }}" \
+            --body "$pr_body" \
+            --base main \
+            --head "update-version-${{ steps.extract-version.outputs.next_version }}"
+
+          gh pr merge "update-version-${{ steps.extract-version.outputs.next_version }}" --squash --delete-branch

CHANGELOG.md

@@ -5,6 +5,13 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+### Added
+
+- Added automated release workflow that creates and merges version bump PRs when `pending-deploy-*`
+  branches are merged to main.
+
 ## [6.10.0] - 2025-11-19
 
 ### Added

internal/update-version.sh

@@ -0,0 +1,73 @@
+#!/bin/bash
+
+set -e
+
+# Check if version argument is provided
+if [ -z "$1" ]; then
+    echo "Usage: $0 <version>"
+    echo "Example: $0 6.11.0"
+    exit 1
+fi
+
+VERSION="$1"
+DATE=$(date +%Y-%m-%d)
+
+# Validate semver format
+if ! [[ "$VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+    echo "Error: Version must be in semver format (e.g., 6.11.0)"
+    exit 1
+fi
+
+# Helper function to set output
+set_output() {
+    echo "has_unreleased=$1"
+    [ -n "$GITHUB_OUTPUT" ] && echo "has_unreleased=$1" >> "$GITHUB_OUTPUT"
+}
+
+# Check if [Unreleased] section exists
+echo "Checking CHANGELOG.md for Unreleased section..."
+if ! grep -q "^## \[Unreleased\]" CHANGELOG.md; then
+    echo "No Unreleased section found. No files updated."
+    set_output false
+    exit 0
+fi
+
+# Check if [Unreleased] section has content
+echo "Checking if Unreleased section has content..."
+unreleased_content=$(awk '
+/^## \[Unreleased\]/ { flag=1; next }
+/^## \[/ { flag=0 }
+flag && /^[^[:space:]]/ { print }
+' CHANGELOG.md | grep -v "^$")
+
+if [ -z "$unreleased_content" ]; then
+    echo "Unreleased section is empty. No files updated."
+    set_output false
+    exit 0
+fi
+
+echo "Found Unreleased section. Updating version to $VERSION (date: $DATE)"
+
+# Update CHANGELOG.md - keep [Unreleased] and add new version below
+echo "Updating CHANGELOG.md..."
+awk -v version="$VERSION" -v date="$DATE" '
+/^## \[Unreleased\]/ { print; print ""; print "## [" version "] - " date; next }
+{ print }
+' CHANGELOG.md > CHANGELOG.md.tmp && mv CHANGELOG.md.tmp CHANGELOG.md
+
+# Update internal/spec/config.yaml
+echo "Updating internal/spec/config.yaml..."
+sed "s/^packageVersion:.*/packageVersion: $VERSION/" internal/spec/config.yaml > internal/spec/config.yaml.tmp && mv internal/spec/config.yaml.tmp internal/spec/config.yaml
+
+# Update README.md
+echo "Updating README.md..."
+sed "s/^- Package version:.*/- Package version: $VERSION/" README.md > README.md.tmp && mv README.md.tmp README.md
+
+echo ""
+echo "✓ Version updated to $VERSION in:"
+echo "  - CHANGELOG.md"
+echo "  - internal/spec/config.yaml"
+echo "  - README.md"
+echo ""
+
+set_output true