Migrate release process to GitHub actions (release-5.1)

.github/workflows/release-build-artifacts.yml

@@ -0,0 +1,42 @@
+name: Release - build and store artifacts
+on:
+  push:
+    tags:
+      - '[0-9]+.[0-9]+.[0-9]+'
+      - '[0-9]+.[0-9]+.[0-9]+-*'
+env:
+  DOTNET_NOLOGO: true
+defaults:
+  run:
+    shell: pwsh
+jobs:
+  build-and-store-artifacts:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7.0.1
+        with:
+          fetch-depth: 0
+      - name: Setup .NET SDK
+        uses: actions/setup-dotnet@v6.0.0
+        with:
+          global-json-file: global.json
+      - name: Build
+        run: dotnet build src --configuration Release
+      - name: Sign NuGet packages
+        uses: Particular/sign-nuget-packages-action@v1.0.0
+        with:
+         client-id: ${{ secrets.AZURE_KEY_VAULT_CLIENT_ID }}
+         tenant-id: ${{ secrets.AZURE_KEY_VAULT_TENANT_ID }}
+         client-secret: ${{ secrets.AZURE_KEY_VAULT_CLIENT_SECRET }}
+         certificate-name: ${{ secrets.AZURE_KEY_VAULT_CERTIFICATE_NAME }}
+      - name: Publish NuGet packages to the workflow
+        uses: actions/upload-artifact@v7.0.2
+        with:
+          name: nugets
+          path: nugets/*
+          retention-days: 1
+      - name: Create draft release and attach artifacts
+        uses: particular/deployment-workflows/.github/actions/create-draft-release-with-assets@1.0.0
+        with:
+          asset-paths: "nugets/"

.github/workflows/release-deploy-production.yml

@@ -0,0 +1,46 @@
+name: Deploy Production
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        required: true
+        type: string
+env:
+  DOTNET_NOLOGO: true
+jobs:
+  check-authorized-user:
+    uses: Particular/deployment-workflows/.github/workflows/verify-authorized-user.yml@1.0.0
+  publish-release-notes:
+    needs: check-authorized-user
+    uses: Particular/deployment-workflows/.github/workflows/publish-release-notes.yml@1.0.0
+    with:
+      version: ${{ inputs.version }}
+    secrets: inherit
+  virus-scan:
+    needs: publish-release-notes
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Scan release for viruses
+        uses: Particular/virus-scan-action@main
+        with:
+          owner: ${{ github.repository_owner }}
+          repo: ${{ github.event.repository.name }}
+          tag: ${{ inputs.version }}
+          github-access-token: ${{ secrets.GITHUB_TOKEN }}
+          slack-token: ${{ secrets.SLACK_TOKEN }}
+          slack-channel: ${{ vars.VIRUS_REPORTING_SLACK_CHANNEL }}
+  push-nuget-packages:
+    permissions:
+      id-token: write
+      contents: read
+    runs-on: ubuntu-latest
+    needs: publish-release-notes
+    steps:
+        - name: Push NuGet packages
+          uses: particular/deployment-workflows/.github/actions/push-nuget-packages@1.0.0
+          with:
+            version: ${{ inputs.version }}
+            deploy-environment: production
+            api-key: required-but-real-value-not-needed-we-use-trusted-publishing-for-production

.github/workflows/release-deploy-staging.yml

@@ -0,0 +1,31 @@
+name: Deploy Staging
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        required: true
+        type: string
+env:
+  DOTNET_NOLOGO: true
+jobs:
+  check-authorized-user:
+    uses: Particular/deployment-workflows/.github/workflows/verify-authorized-user.yml@1.0.0
+  push-nuget-packages-staging:
+    needs: check-authorized-user
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: write
+    steps:
+      - name: Push NuGet packages
+        uses: Particular/deployment-workflows/.github/actions/push-nuget-packages@1.0.0
+        with:
+          version: ${{ inputs.version }}
+          deploy-environment: staging
+          api-key: ${{ secrets.FEEDZIO_PUBLISH_API_KEY }}
+  generate-release-notes:
+    needs: check-authorized-user
+    uses: Particular/deployment-workflows/.github/workflows/generate-release-notes.yml@1.0.0
+    with:
+      version: ${{ inputs.version }}
+    secrets: inherit

.release/.templates/default/create/footer.sbn

@@ -0,0 +1,10 @@
+{{ if config.create.include_footer }}
+
+### Where to get it
+
+<!-- TODO change the link for the apps that don't go to NuGet -->
+You can download this release from [NuGet](https://www.nuget.org/profiles/ParticularSoftware/).
+
+{{ end }}
+
+<!-- RELEASE NOTES GENERATED -->

.release/.templates/default/issue-note.sbn

@@ -0,0 +1,6 @@
+{{
+    if issue.is_pull_request
+}}- [__#{{ issue.public_number }}__]({{ issue.html_url }}) {{ issue.title }}
+{{  else
+}}- [__#{{ issue.public_number }}__]({{ issue.html_url }}) {{ issue.title }}
+{{  end -}}

.release/GitReleaseManager.yaml

@@ -0,0 +1,10 @@
+templates-dir: .templates
+create:
+  include-footer: true
+issue-labels-include:
+  - "Bug"
+  - "Feature"
+  - "Improvement"
+  - "Dependency CVE"
+issue-labels-exclude:
+  - "Refactoring"