chore(ci): revamp workflows (#489)

.github/dependabot.yml

@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: 'github-actions'
+    directory: '/'
+    schedule:
+      interval: 'weekly'

.github/workflows/check-pr-title.yaml → .github/workflows/check-pr-title.yml

@@ -2,15 +2,16 @@ name: Check PR Title
 
 on:
   pull_request:
-    types: ['opened', 'reopened', 'edited', 'synchronize']
+    types:
+      - opened
+      - edited
+      - reopened
+      - synchronize
 
 jobs:
-  check_pr_title:
+  check-pr-title:
     name: Check PR Title
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout Source Branch
-        uses: actions/checkout@v3
-
       - name: Check PR Title
         uses: rudderlabs/[email protected]

.github/workflows/create-hotfix-branch.yml

@@ -0,0 +1,23 @@
+name: Create New Hotfix Branch
+
+on:
+  workflow_dispatch:
+    inputs:
+      hotfix_name:
+        description: Hotfix branch name
+        required: true
+
+jobs:
+  create-branch:
+    name: Create New Branch
+    runs-on: ubuntu-latest
+
+    # Only allow release stakeholders to initiate releases
+    if: github.ref == 'refs/heads/main' && (github.actor == 'ItsSudip' || github.actor == 'krishna2020' || github.actor == 'lvrach' || github.actor == 'cisse21' || github.actor == 'nidhilashkari17' || github.actor == 'debanjan97' || github.actor == 'AchuthaSourabhC' || github.actor == 'saikumarrs') && (github.triggering_actor == 'ItsSudip' || github.triggering_actor == 'krishna2020' || github.triggering_actor == 'lvrach' || github.triggering_actor == 'cisse21' || github.triggering_actor == 'nidhilashkari17' || github.triggering_actor == 'debanjan97' || github.triggering_actor == 'AchuthaSourabhC' || github.triggering_actor == 'saikumarrs')
+    steps:
+      - name: Create Branch
+        uses: peterjgrainger/[email protected]
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          branch: 'hotfix/${{ github.event.inputs.hotfix_name }}'

.github/workflows/deploy-to-dev.yml

@@ -0,0 +1,39 @@
+name: Deploy Configurations To Development DB
+
+on:
+  push:
+    branches:
+      - develop
+  pull_request:
+    types:
+      - closed
+    branches:
+      - develop
+
+jobs:
+  report-code-coverage:
+    name: Report Code Coverage
+    if: github.event_name == 'push'
+    uses: ./.github/workflows/report-code-coverage.yml
+
+  deploy-to-dev:
+    name: Deployment To Development DB
+    # Only merged pull requests must trigger
+    if: github.event.pull_request.merged == true
+    uses: ./.github/workflows/deploy.yml
+    with:
+      deploy_url: https://api.dev.rudderlabs.com
+    secrets:
+      API_USERNAME: ${{ secrets.DEV_USERNAME }}
+      API_PASSWORD: ${{ secrets.DEV_PASSWORD }}
+
+  deploy-to-sources-dev:
+    name: Deployment To Sources Development DB
+    # Only merged pull requests must trigger
+    if: github.event.pull_request.merged == true
+    uses: ./.github/workflows/deploy.yml
+    with:
+      deploy_url: https://sources-api.dev.rudderlabs.com
+    secrets:
+      API_USERNAME: ${{ secrets.DEV_USERNAME }}
+      API_PASSWORD: ${{ secrets.DEV_PASSWORD }}

.github/workflows/deploy-to-prod.yml

@@ -0,0 +1,52 @@
+name: Deploy Configurations To Production DB
+
+on:
+  workflow_call:
+  push:
+    branches:
+      - main
+  pull_request:
+    types:
+      - closed
+    branches:
+      - main
+
+jobs:
+  report-code-coverage:
+    name: Report Code Coverage
+    if: github.event_name == 'push'
+    uses: ./.github/workflows/report-code-coverage.yml
+
+  extract-version:
+    name: Extract Deployment Version
+    runs-on: ubuntu-latest
+    # Only merged pull requests from release candidate branches and external workflow calls must trigger
+    if: (((startsWith(github.event.pull_request.head.ref, 'release/') || startsWith(github.event.pull_request.head.ref, 'hotfix-release/')) && github.event.pull_request.merged == true) || github.event_name == 'workflow_call')
+    outputs:
+      version: ${{ steps.extract_version.outputs.version }}
+    steps:
+      - name: Checkout
+        uses: actions/[email protected]
+        with:
+          fetch-depth: 1
+
+      - name: Extract Package Version
+        id: extract_version
+        run: |
+          version=$(jq -r .version package.json)
+          echo $version
+          echo "version=$version" >> $GITHUB_OUTPUT
+
+  deploy:
+    needs: [ extract-version ]
+    name: Deployment To Production DB
+    # Only merged pull requests from release candidate branches and external workflow calls must trigger
+    if: (((startsWith(github.event.pull_request.head.ref, 'release/') || startsWith(github.event.pull_request.head.ref, 'hotfix-release/')) && github.event.pull_request.merged == true) || github.event_name == 'workflow_call')
+    uses: ./.github/workflows/deploy.yml
+    with:
+      deploy_url: https://api.rudderstack.com
+      notify: true
+      version: ${{ needs.extract-version.outputs.version }}
+    secrets:
+      API_USERNAME: ${{ secrets.PROD_USERNAME }}
+      API_PASSWORD: ${{ secrets.PROD_PASSWORD }}