reusable_publish_changelog.yml

name: Build and publish latest changelog

on:
  workflow_call:

permissions:
  contents: read

env:
  BRANCH: develop

jobs:
  publish_changelog:
    permissions:
      contents: write
    # Force Github action to run only a single job at a time (based on the group name)
    # This is to prevent race-condition and inconsistencies with changelog push
    concurrency:
      group: changelog-build
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository # reusable workflows start clean, so we need to checkout again
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
        with:
          fetch-depth: 0
      - name: Git client setup and refresh tip
        run: |
          git config user.name "Release bot"
          git config user.email "aws-devax-open-source@amazon.com"
          git config pull.rebase true
          git config remote.origin.url >&- || git remote add origin https://github.com/"${origin}" # Git Detached mode (release notes) doesn't have origin
          git pull origin "${BRANCH}"
      - name: "Generate latest changelog"
        run: make changelog
      - name: Update Changelog with PR
        run: |
          HAS_CHANGE=$(git status --porcelain)
          test -z "${HAS_CHANGE}" && echo "Nothing to update" && exit 0
          git checkout -b update-changelog-${{github.run_id}}
          git add CHANGELOG.md
          git commit -m "update changelog with latest changes"
          git pull origin "${BRANCH}" # prevents concurrent branch update failing push
          git push origin update-changelog-${{github.run_id}}