Weekly publish of pre-release

[carole-lavillonniere]

Towards COSY-807.

• Auto-publish a prerelease of RIE every Friday mornings at 6am UTC, if there are new commits.
• A new tag with bumped patch is pushed (latest version is fetched from Github releases).
• The goal is to have vulnerabilities auto-resolve weekly without human intervention.
• Release can still be done manually if needed
• If the release job fails, we notify slack channel #core-systems-notifications

Related:

• Enable Renovate automerge #109
• https://github.com/localstack/localstack-pro/pull/8267

[dfangl]

I am not super happy with the workflow call, but sadly pushes from the github action do not trigger more actions, so this is all we can do I think :P

However, we never really create a tag, right? I think the release action will not create one, and instead this fails. Could you double check or push a tag in the weekly-release workflow?

[carole-lavillonniere]

I am not super happy with the workflow call, but sadly pushes from the github action do not trigger more actions, so this is all we can do I think :P

However, we never really create a tag, right? I think the release action will not create one, and instead this fails. Could you double check or push a tag in the weekly-release workflow?

Added a step to push the tag: 2e08a7d
Since we cannot run this workflow without merging it first, tested by forking the repo and running the workflow here: https://github.com/carole-lavillonniere/lambda-runtime-init/actions/runs/31389766763

[dfangl]

LGTM now!