Skip to content

chore: new release processes - #1090

Open
joaodordio wants to merge 3 commits into
masterfrom
chore/new-release-processes
Open

joaodordio wants to merge 3 commits into
masterfrom
chore/new-release-processes

Conversation

@joaodordio

@joaodordio joaodordio commented Sep 11, 2026

Copy link
Copy Markdown
Member

Summary

Replaces the existing ad-hoc release workflows with a standardized two-step process across all SDKs.

No customer facing changes

Workflow 1: Prepare Release (workflow_dispatch)

Inputs: version, ticket

  • Updates CHANGELOG.md (promotes [Unreleased] to new version section)
  • Bumps all version files
  • Opens a release PR with a checklist
  • Creates a GitHub draft release (no tag created yet, nothing published)

Workflow 2: Publish Release (workflow_dispatch)

Input: version

  • Verifies the prepare-release PR has been merged (checks CHANGELOG on master/main)
  • Publishes the draft release and creates the tag on master/main at this moment
  • Publishes to the SDK's distribution platform
  • Posts to #eng-sdk-team on Slack

Files changed

  • Added .github/workflows/prepare-release.yml
  • Added .github/workflows/publish-release.yml
  • Deleted old release workflow(s)

Secrets to add

SLACK_WEBHOOK must be configured in repo Settings > Secrets > Actions before the first Publish Release run.

Related: [SDK Release Process Team Agreement 2026-09-11]

No customer facing changes

Replaces the monolithic release workflow with a two-step process:
- Prepare Release: bumps version, updates changelog, opens PR, creates GitHub draft release
- Publish Release: promotes draft, tags master/main, publishes to distribution, posts Slack

Ref: SDK release process team agreement 2026-09-11
@joaodordio
joaodordio requested a review from a team as a code owner September 11, 2026 18:04
@jferrao-itrbl

Copy link
Copy Markdown

This PR does not touch CHANGELOG.md and the body does not contain No customer facing changes. .github/workflows/changelog-check.yml and rules/reviewer.md require one or the other. this change is operator-facing CI, not an SDK behaviour change.

Either put No customer facing changes in the PR body (or add a changelog line if you consider this customer-facing).

… grep

- Add ref: master/main to actions/checkout in all prepare/publish workflows
  so workflows always operate on the default branch regardless of dispatch ref
- Replace shell-injection-prone ${{ steps...outputs.notes }} pattern with
  --notes-file using $RUNNER_TEMP/release-notes.md (safe from backticks/quotes
  in changelog content)
- Treat empty [Unreleased] section as a hard error in prepare-release
- Fix CHANGELOG verification grep: grep -qE "^## \[VERSION\]" (anchored,
  prevents substring matches and prefix collisions like 3.1.0 vs 3.1.0-rc1)
Replace SDK_RELEASE_TOKEN (iOS) and GITHUB_TOKEN (all repos) with a
short-lived installation token from the iterable-sdk-release GitHub App,
generated via actions/create-github-app-token@v1.

Benefits:
- App token triggers CI on PRs it creates (GITHUB_TOKEN cannot)
- 1h TTL vs long-lived PAT
- Workflow-scoped permissions so we can push .github/workflows/ files

Required credentials (repo variable + secret, or set at org level):
  vars.ITERABLE_SDK_RELEASE_APP_ID
  secrets.ITERABLE_SDK_RELEASE_APP_PRIVATE_KEY
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants