qbit-cms/.gitea/workflows/release-rc.yaml

name: Release candidate
'on':
  workflow_dispatch:
    inputs:
      dry_run:
        description: Plan a cut without changing release state
        type: boolean
        default: false
      finalize:
        description: Retry finalization of an existing cut; do not cut another RC
        type: boolean
        default: false
      recover:
        description: Recover the same published RC after a deployment timeout; never
          reupload
        type: boolean
        default: false
      circle_build:
        description: Original release run id (recovery only)
        type: string
        default: ''
      merge_sha:
        description: Existing cut merge_sha (finalize retry only)
        type: string
        default: ''
      bump_sha:
        description: Existing cut bump_sha (finalize retry only)
        type: string
        default: ''
      branch:
        description: Existing cut branch (finalize retry only)
        type: string
        default: ''
      version:
        description: Existing cut version (finalize retry only)
        type: string
        default: ''
  pull_request:
    types:
    - closed
    branches:
    - develop
permissions:
  contents: read
jobs:
  release-rc:
    # The old qbit-rc-published repository_dispatch is replaced by the already-proven workflow_dispatch
    # completion: the publisher's own ActionsWRITE job dispatches this workflow with finalize=true plus
    # merge_sha/bump_sha/branch/version (same inputs as the manual finalize retry).
    permissions:
      contents: write
      actions: read
      pull-requests: write
    if: github.event_name == 'workflow_dispatch'
      || (github.event_name == 'pull_request' && github.event.pull_request.merged
      == true && github.event.pull_request.base.ref == 'develop' && contains(github.event.pull_request.labels.*.name,
      'release:rc'))
    uses: self:KofTwentyTwo/platform-ci/.gitea/workflows/qbit-release-rc.yaml@qrun-release-v1
    with:
      dry_run: ${{ github.event_name == 'workflow_dispatch' && inputs.dry_run || false
        }}
      finalize: ${{ github.event_name == 'workflow_dispatch' && inputs.finalize }}
      recover: ${{ github.event_name == 'workflow_dispatch' && inputs.recover || false
        }}
      circle_build: ${{ github.event_name == 'workflow_dispatch' && inputs.circle_build
        || '' }}
      merge_sha: ${{ inputs.merge_sha || '' }}
      bump_sha: ${{ inputs.bump_sha || '' }}
      branch: ${{ inputs.branch || '' }}
      version: ${{ inputs.version || '' }}
    secrets:
      QRUN_TAG_SIGNING_KEY: ${{ secrets.QRUN_TAG_SIGNING_KEY }}