run-patch-release.yml

---
name: run-patch-release

on:
  workflow_dispatch:
    inputs:
      version:
        description: 'The version (semver format: major.minor.patch)'
        required: true
        type: string

# Avoid concurrency so we can watch the releases correctly
concurrency:
  group: ${{ github.workflow }}

permissions:
  contents: read

env:
  JOB_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
  SLACK_CHANNEL: "#apm-server"
  GH_TOKEN: ${{ secrets.APM_SERVER_RELEASE_TOKEN }}

jobs:
  prepare:
    runs-on: ubuntu-latest
    outputs:
      release-branch: ${{ steps.prepare.outputs.release-branch }}
      release-type: ${{ steps.prepare.outputs.release-type }}
      release-version: ${{ steps.prepare.outputs.release-version }}
      slack-thread: ${{ steps.prepare.outputs.slack-thread }}
    steps:
      - uses: actions/checkout@v4

      - id: prepare
        uses: ./.github/workflows/prepare-release
        with:
          slack-bot-token: ${{ secrets.SLACK_BOT_TOKEN }}
          version: ${{ inputs.version }}
          type: 'patch'

  run-patch:
    runs-on: ubuntu-latest
    needs: [ prepare ]
    env:
      RELEASE_BRANCH: ${{ needs.prepare.outputs.release-branch }}
      RELEASE_TYPE: ${{ needs.prepare.outputs.release-type }}
      RELEASE_VERSION: ${{ needs.prepare.outputs.release-version }}
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v4
        with:
          # 0 indicates all history for all branches and tags.
          fetch-depth: 0
          # Use the makefile in the given release branch.
          ref: ${{ env.RELEASE_BRANCH }}

      # Required to use a service account, otherwise PRs created by
      # GitHub bot won't trigger any CI builds.
      # See https://github.com/peter-evans/create-pull-request/issues/48#issuecomment-537478081
      - name: Configure git user
        uses: elastic/apm-pipeline-library/.github/actions/setup-git@current
        with:
          token: ${{ env.GH_TOKEN }}

      - name: Import GPG key
        uses: crazy-max/ghaction-import-gpg@01dd5d3ca463c7f10f7f4f7b4f177225ac661ee4  # v6.1.0
        with:
          gpg_private_key: ${{ secrets.APM_SERVER_RELEASE_GPG_PRIVATE_KEY }}
          passphrase: ${{ secrets.APM_SERVER_RELEASE_PASSPHRASE }}
          git_user_signingkey: true
          git_commit_gpgsign: true

      - run: make patch-release

      - if: success()
        uses: elastic/oblt-actions/slack/send@v1.9.1
        with:
          bot-token: ${{ secrets.SLACK_BOT_TOKEN }}
          channel-id: ${{ env.SLACK_CHANNEL }}
          message: |-
            Feature freeze for `${{ github.repository }}@${{ env.RELEASE_VERSION }}` is Today.
            All the relevant PRs and issues have been created.
          thread-timestamp: ${{ needs.prepare.outputs.slack-thread || '' }}

      - if: failure()
        uses: elastic/oblt-actions/slack/send@v1.9.1
        with:
          bot-token: ${{ secrets.SLACK_BOT_TOKEN }}
          channel-id: ${{ env.SLACK_CHANNEL }}
          message: |-
            :fire: Something went wrong with the patch release. See <${{ env.JOB_URL }}|logs>.
          thread-timestamp: ${{ needs.prepare.outputs.slack-thread || '' }}