ci: Introduce Auto-Releases

.github/config/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "3.21.0"
+}

.github/config/release-please-config.json

@@ -0,0 +1,40 @@
+{
+  "$schema": "https://raw.githubusercontent.com/googleapis/release-please/main/schemas/config.json",
+  "changelog-sections": [
+    {
+      "type": "chore",
+      "section": "Miscellaneous"
+    },
+    {
+      "type": "ci",
+      "section": "CI/CD"
+    },
+    {
+      "type": "deps",
+      "section": "Dependency Upgrades"
+    },
+    {
+      "type": "docs",
+      "section": "Documentation"
+    },
+    {
+      "type": "feat",
+      "section": "Features"
+    },
+    {
+      "type": "fix",
+      "section": "Bugfixes"
+    },
+    {
+      "type": "refactor",
+      "section": "Refactoring"
+    }
+  ],
+  "changelog-type": "github",
+  "extra-label": "automerge",
+  "include-v-in-tag": false,
+  "packages": {
+    ".": {}
+  },
+  "release-type": "simple"
+}

.github/workflows/automerge.yml

@@ -0,0 +1,31 @@
+name: Automerge Release-Please PRs
+
+on:
+  schedule:
+  - cron: '50 4 * * 1' # runs every Monday at 04:50 UTC
+
+jobs:
+  auto-merge:
+    runs-on: ubuntu-latest
+    steps:
+    - name: Import Secrets
+      id: vault-secrets
+      uses: hashicorp/[email protected]
+      with:
+        url: ${{ secrets.VAULT_ADDR }}
+        method: approle
+        roleId: ${{ secrets.VAULT_ROLE_ID }}
+        secretId: ${{ secrets.VAULT_SECRET_ID}}
+        secrets: |
+          secret/data/products/infra/ci/infra-releases RELEASES_APP_ID;
+          secret/data/products/infra/ci/infra-releases RELEASES_APP_KEY;
+    - name: Generate a GitHub token for infra-rerun camunda/infra-global-github-actions
+      id: app-token
+      uses: actions/create-github-app-token@v1
+      with:
+        app-id: ${{ steps.vault-secrets.outputs.RELEASES_APP_ID }}
+        private-key: ${{ steps.vault-secrets.outputs.RELEASES_APP_KEY }}
+    - name: Automerge Release-Please PR
+      uses: camunda/infra-global-github-actions/teams/infra/pull-request/automerge@main
+      with:
+        github-token: ${{ steps.app-token.outputs.token }}

.github/workflows/release.yml

@@ -0,0 +1,32 @@
+name: Handle Release PRs
+
+on:
+  push:
+    branches:
+    - master
+
+jobs:
+  release-please:
+    runs-on: ubuntu-latest
+    steps:
+    - name: Import Secrets
+      id: vault-secrets
+      uses: hashicorp/[email protected]
+      with:
+        url: ${{ secrets.VAULT_ADDR }}
+        method: approle
+        roleId: ${{ secrets.VAULT_ROLE_ID }}
+        secretId: ${{ secrets.VAULT_SECRET_ID}}
+        secrets: |
+          secret/data/products/infra/ci/infra-releases RELEASES_APP_ID;
+          secret/data/products/infra/ci/infra-releases RELEASES_APP_KEY;
+    - name: Generate a GitHub token for infra-rerun camunda/infra-global-github-actions
+      id: app-token
+      uses: actions/create-github-app-token@v1
+      with:
+        app-id: ${{ steps.vault-secrets.outputs.RELEASES_APP_ID }}
+        private-key: ${{ steps.vault-secrets.outputs.RELEASES_APP_KEY }}
+    - name: Handle Release Creation
+      uses: camunda/infra-global-github-actions/teams/infra/pull-request/release@main
+      with:
+        github-token: ${{ steps.app-token.outputs.token }}