mirror of
https://github.com/openclaw/openclaw.git
synced 2026-04-03 03:03:24 -04:00
b4aefa3937
Add all new CI/CD workflow files for the staged branch promotion pipeline (develop alpha beta main). Push triggers are intentionally disabled workflows use workflow_dispatch or workflow_call only. No changes to existing ci.yml. All workflows are inert until activated in a follow-up PR. New workflows: - feature-pr.yml: auto-create PRs to develop (disabled) - hotfix-pr.yml: emergency hotfix PRs to main (disabled) - promote-branch.yml: staged promotion (disabled) - release-orchestrator.yml: release pipeline (disabled) - deployment-strategy.yml: npm + Docker deploy (workflow_call) - testing-strategy.yml: progressive test gates (workflow_call) - generate-changelog.yml: changelog generation (workflow_call) - version-operations.yml: version bumping (workflow_call) - release.yml: manual release trigger (workflow_dispatch) - rollback.yml: emergency rollback (workflow_dispatch) - discord-notify action: reusable notification Also adds pipeline docs and updates CONTRIBUTING.md with future branch strategy (clearly marked as not yet active). Split from #10755 for safe, additive merge.
97 lines
2.7 KiB
YAML
97 lines
2.7 KiB
YAML
name: Hotfix PR
|
|
|
|
# Emergency hotfix workflow - bypasses staging pipeline
|
|
# Use for critical security fixes or production-breaking bugs only
|
|
#
|
|
# Flow: hotfix/* → main (directly, with expedited review)
|
|
|
|
# NOTE: push triggers disabled until staging pipeline is activated.
|
|
# To enable: uncomment the push block and remove workflow_dispatch.
|
|
# push:
|
|
# branches:
|
|
# - "hotfix/**"
|
|
on:
|
|
workflow_dispatch:
|
|
|
|
concurrency:
|
|
group: hotfix-${{ github.ref_name }}
|
|
cancel-in-progress: true
|
|
|
|
permissions:
|
|
contents: read
|
|
pull-requests: write
|
|
|
|
jobs:
|
|
create-pr:
|
|
name: Create Hotfix PR
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Check for existing PR
|
|
id: check-pr
|
|
env:
|
|
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
run: |
|
|
BRANCH="${{ github.ref_name }}"
|
|
|
|
EXISTING=$(gh pr list --head "$BRANCH" --base main --json number --jq '.[0].number // empty')
|
|
|
|
if [ -n "$EXISTING" ]; then
|
|
echo "exists=true" >> $GITHUB_OUTPUT
|
|
echo "pr_number=$EXISTING" >> $GITHUB_OUTPUT
|
|
echo "Hotfix PR #$EXISTING already exists"
|
|
else
|
|
echo "exists=false" >> $GITHUB_OUTPUT
|
|
fi
|
|
|
|
- name: Create Hotfix PR
|
|
if: steps.check-pr.outputs.exists != 'true'
|
|
env:
|
|
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
run: |
|
|
BRANCH="${{ github.ref_name }}"
|
|
|
|
# Extract title from branch name
|
|
TITLE=$(echo "$BRANCH" | sed 's|^hotfix/||; s|-| |g; s|_| |g')
|
|
TITLE="🚨 HOTFIX: $(echo "${TITLE:0:1}" | tr '[:lower:]' '[:upper:]')${TITLE:1}"
|
|
|
|
# Create PR body
|
|
BODY=$(cat << 'PRBODY'
|
|
## 🚨 Emergency Hotfix
|
|
|
|
**This PR bypasses the normal staging pipeline.**
|
|
|
|
### What's broken?
|
|
<!-- Describe the production issue -->
|
|
|
|
### Root cause
|
|
<!-- Brief explanation of what went wrong -->
|
|
|
|
### Fix
|
|
<!-- What this hotfix does -->
|
|
|
|
### Verification
|
|
- [ ] Tested locally
|
|
- [ ] Reviewed by at least one other maintainer
|
|
- [ ] Post-merge monitoring plan in place
|
|
|
|
---
|
|
⚠️ **After merging:** Cherry-pick this fix to `develop`, `alpha`, and `beta` branches to keep them in sync.
|
|
|
|
*This PR was auto-created by the hotfix-pr workflow.*
|
|
PRBODY
|
|
)
|
|
|
|
gh pr create \
|
|
--base main \
|
|
--head "$BRANCH" \
|
|
--title "$TITLE" \
|
|
--label "hotfix,priority:critical" \
|
|
--body "$BODY"
|
|
|
|
echo "Created hotfix PR: $BRANCH → main"
|