Implement workflow-based release process for immutable releases

Co-authored-by: MikeMcQuaid <[email protected]>

Author: Copilot

.github/workflows/pkg-installer.yml

@@ -11,6 +11,12 @@ on:
   release:
     types:
       - published
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Git tag for the release'
+        required: true
+        type: string
 env:
   PKG_APPLE_DEVELOPER_TEAM_ID: ${{ secrets.PKG_APPLE_DEVELOPER_TEAM_ID }}
   HOMEBREW_NO_ANALYTICS_THIS_RUN: 1
@@ -85,6 +91,7 @@ jobs:
           path: brew
           fetch-depth: 0
           persist-credentials: false
+          ref: ${{ inputs.tag || github.ref }}
 
       - name: Get Homebrew version from Git
         id: homebrew-version
@@ -230,13 +237,17 @@ jobs:
                                     --wait
 
       - name: Upload installer to GitHub release
-        if: github.event_name == 'release'
+        if: github.event_name == 'release' || github.event_name == 'workflow_dispatch'
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           INSTALLER_PATH: ${{ needs.build.outputs.installer_path }}
         run: |
           VERSION="${INSTALLER_PATH#Homebrew-}"
           VERSION="${VERSION%.pkg}"
+          # For workflow_dispatch, create a draft release if it doesn't exist yet
+          if ! gh release view --repo Homebrew/brew "${VERSION}" >/dev/null 2>&1; then
+            gh release create --repo Homebrew/brew "${VERSION}" --draft --title "${VERSION}" --notes ""
+          fi
           gh release upload --repo Homebrew/brew "${VERSION}" "${INSTALLER_PATH}"
 
   issue:

Library/Homebrew/dev-cmd/release.rb

@@ -77,6 +77,13 @@ def run
           puts blog_post_notes
         end
 
+        ohai "Creating tag #{new_version}"
+        safe_system "git", "-C", HOMEBREW_REPOSITORY, "tag", "-a", new_version, "-m", "Release #{new_version}"
+        safe_system "git", "-C", HOMEBREW_REPOSITORY, "push", "origin", new_version
+
+        # Get the commit SHA for the tag
+        tag_sha = Utils.safe_popen_read("git", "-C", HOMEBREW_REPOSITORY, "rev-parse", new_version).strip
+
         ohai "Creating draft release for version #{new_version}"
 
         release_notes = if args.major? || args.minor?
@@ -93,6 +100,60 @@ def run
           odie "Unable to create release: #{e.message}!"
         end
 
+        ohai "Triggering pkg-installer workflow for #{new_version}"
+        begin
+          GitHub.workflow_dispatch_event("Homebrew", "brew", "pkg-installer.yml", new_version, tag: new_version)
+        rescue *GitHub::API::ERRORS => e
+          opoo "Unable to trigger workflow: #{e.message}"
+          opoo "You may need to manually trigger the pkg-installer workflow."
+        end
+
+        ohai "Waiting for pkg-installer workflow to complete..."
+        opoo "This may take several minutes. You can monitor progress at:"
+        puts "https://github.com/Homebrew/brew/actions/workflows/pkg-installer.yml"
+
+        # Poll for workflow completion
+        max_attempts = 60 # 30 minutes (30 seconds * 60)
+        attempt = 0
+        workflow_completed = false
+
+        while attempt < max_attempts
+          sleep 30
+          attempt += 1
+
+          # Check workflow runs for the commit SHA
+          begin
+            runs_url = "#{GitHub::API_URL}/repos/Homebrew/brew/actions/workflows/pkg-installer.yml/runs"
+            response = GitHub::API.open_rest("#{runs_url}?head_sha=#{tag_sha}&per_page=1")
+
+            if response["workflow_runs"]&.any?
+              run = response["workflow_runs"].first
+              status = run["status"]
+              conclusion = run["conclusion"]
+
+              if status == "completed"
+                if conclusion == "success"
+                  ohai "Workflow completed successfully!"
+                  workflow_completed = true
+                else
+                  opoo "Workflow completed with status: #{conclusion}"
+                  opoo "Check the workflow run at: #{run["html_url"]}"
+                end
+                break
+              elsif (attempt % 4).zero?
+                print "."
+              end
+            end
+          rescue *GitHub::API::ERRORS => e
+            opoo "Error checking workflow status: #{e.message}" if attempt == 1
+          end
+        end
+
+        unless workflow_completed
+          opoo "Workflow did not complete in time or failed."
+          opoo "Please check the workflow status before publishing the release."
+        end
+
         puts release["html_url"]
         exec_browser release["html_url"]
       end