ci: Move to PR-driven releases

Author: dbanty

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,24 @@
+on:
+  push:
+    branches: [main]
+name: Create Release PR
+jobs:
+  prepare-release:
+    if: "!contains(github.event.head_commit.message, 'chore: prepare release')" # Skip merges from releases
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          token: ${{ secrets.PAT }}
+      - name: Configure Git
+        run: |
+          git config --global user.name GitHub Actions
+          git config user.email github-actions@github.com
+      - uses: knope-dev/action@v2.0.0
+        with:
+          version: 0.12.0
+      - run: knope prepare-release --verbose
+        env:
+          GITHUB_TOKEN: ${{ secrets.PAT }}
+        continue-on-error: true

.github/workflows/prerelease.yml

@@ -1,9 +1,6 @@
 name: Release Dry Run
 
 on:
-  push:
-    branches:
-      - main
   pull_request:
 jobs:
   release:

.github/workflows/preview_release_pr.yml

@@ -1,31 +1,28 @@
 name: Release
 
-on: workflow_dispatch
+on:
+  pull_request:
+    types: [closed]
+    branches: [main]
 
 jobs:
   release:
+    if: github.head_ref == 'release' && github.event.pull_request.merged == true
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 0
           token: ${{ secrets.PAT }}
-      - name: Import GPG key
-        uses: crazy-max/ghaction-import-gpg@v6
-        with:
-          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
-          git_user_signingkey: true
-          git_commit_gpgsign: true
-          git_push_gpgsign: false
       - name: Install Knope
         uses: knope-dev/action@v2.0.0
         with:
           version: 0.12.0
-      - name: Bump Version & Create GitHub Release
-        run: knope release
-        env:
-          GITHUB_TOKEN: ${{ secrets.PAT }}
       - name: Install Poetry
         run: pip install --upgrade poetry
       - name: Push to PyPI
         run: poetry publish --build -u __token__ -p ${{ secrets.PYPI_TOKEN }}
+      - name: Create GitHub Release
+        run: knope release
+        env:
+          GITHUB_TOKEN: ${{ secrets.PAT }}

.github/workflows/release-dry-run.yml

@@ -0,0 +1,48 @@
+[package]
+versioned_files = ["pyproject.toml"]
+changelog = "CHANGELOG.md"
+
+[[workflows]]
+name = "prepare-release"
+
+[[workflows.steps]]
+type = "Command"
+command = "git switch -c release"
+
+[[workflows.steps]]
+type = "PrepareRelease"
+
+[[workflows.steps]]
+type = "Command"
+command = "git commit -m \"chore: prepare release $version\" && git push --force --set-upstream origin release"
+
+[workflows.steps.variables]
+"$version" = "Version"
+
+[[workflows.steps]]
+type = "CreatePullRequest"
+base = "main"
+
+[workflows.steps.title]
+template = "chore: prepare release $version"
+variables = { "$version" = "Version" }
+
+[workflows.steps.body]
+template = "This PR was created by Knope. Merging it will create a new release\n\n$changelog"
+variables = { "$changelog" = "ChangelogEntry" }
+
+[[workflows]]
+name = "release"
+
+[[workflows.steps]]
+type = "Release"
+
+[[workflows]]
+name = "document-change"
+
+[[workflows.steps]]
+type = "CreateChangeFile"
+
+[github]
+owner = "openapi-generators"
+repo = "openapi-python-client"