OSOE-861: Add Git tags for Azure deployments and swaps

.github/actions/add-azure-application-insights-release-annotation/Add-ReleaseAnnotation.ps1

@@ -1,6 +1,7 @@
 param(
     [parameter(Mandatory = $true)][string]$ApplicationInsightsResourceId,
     [parameter(Mandatory = $true)][string]$ReleaseName,
+    [parameter(Mandatory = $false)][string]$Timestamp = '',
     [parameter(Mandatory = $false)]$ReleaseProperties = @()
 )
 
@@ -9,7 +10,7 @@ Write-Output "Adding release annotation with the release name `"$ReleaseName`"."
 $annotation = @{
     Id = [Guid]::NewGuid()
     AnnotationName = $ReleaseName
-    EventTime = (Get-Date).ToUniversalTime().GetDateTimeFormats('s')[0]
+    EventTime = if ($Timestamp) { $Timestamp } else { (Get-Date).ToUniversalTime().GetDateTimeFormats('s')[0] }
     # AI only displays annotations from the "Deployment" category so this must be this string.
     Category = 'Deployment'
     Properties = ConvertTo-Json $ReleaseProperties -Compress

.github/actions/add-azure-application-insights-release-annotation/action.yml

@@ -13,6 +13,18 @@ inputs:
     required: false
     description: >
       The name to give the created release annotation. This will be visible on the Azure Portal when viewing it.
+  timestamp:
+    required: false
+    description: >
+      The timestamp to use for the release annotation. If not set then the current time will be used. This can be useful
+      when using a single timestamp for multiple actions in a workflow.
+  commit-sha:
+    required: false
+    default: ${{ github.sha }}
+    description: >
+      The commit SHA to include in the release annotation. If not set then the current commit SHA will be used. This is
+      useful in case of a swap deployment where the code repository is different than the repository the action is
+      running in.
 
 runs:
   using: composite
@@ -28,13 +40,15 @@ runs:
         # Might contain user input so should go via an env var for security.
         RELEASE_NAME: ${{ inputs.release-name }}
         AI_RESOURCE_ID: ${{ inputs.application-insights-resource-id }}
+        TIMESTAMP: ${{ inputs.timestamp }}
       run: |
         $params = @{
             ApplicationInsightsResourceId = $Env:AI_RESOURCE_ID
             ReleaseName = $Env:RELEASE_NAME ? $Env:RELEASE_NAME : 'Run #${{ github.run_number }} (GitHub Actions)'
+            Timestamp = $Env:TIMESTAMP
             ReleaseProperties = @{
               'Commit branch' = '${{ github.head_ref }}'
-              'Commit SHA' = '${{ github.sha }}'
+              'Commit SHA' = '${{ inputs.commit-sha }}'
               'Workflow name' = '${{ github.workflow }}'
               'Workflow run URL' = 'https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}'
             }

.github/actions/checkout/action.yml

@@ -22,6 +22,10 @@ inputs:
   fetch-depth:
     description: Number of commits to fetch. 0 indicates all history for all branches and tags.
     default: 1
+  submodules:
+    description: >
+      Whether to checkout submodules - `true` to checkout submodules or `recursive` to recursively checkout submodules.
+    default: recursive
 
 runs:
   using: composite
@@ -40,7 +44,7 @@ runs:
       with:
         repository: ${{ inputs.repository }}
         ref: ${{ inputs.ref }}
-        submodules: recursive
+        submodules: ${{ inputs.submodules }}
         token: ${{ env.CHECKOUT_TOKEN }}
         path: ${{ inputs.path }}
         fetch-depth: ${{ inputs.fetch-depth }}

.github/actions/create-timestamp/action.yml

@@ -0,0 +1,22 @@
+name: Create Timestamp
+description: Create a timestamp in ISO 8601 format for use in tags (replaces ":" with "." for use in git tags).
+runs:
+  using: composite
+  steps:
+    - name: Get Timestamp
+      id: get-timestamp
+      shell: pwsh
+      run: |
+        # Get the current timestamp in the ISO 8601 format but replace ":" with "." because we can't use ":" in tags.
+        $timestamp = ((Get-Date).ToUniversalTime().GetDateTimeFormats('s')[0])
+        $timestampTag = $timestamp -replace ":", "-"
+        echo "timestamp=$timestamp" >> $env:GITHUB_OUTPUT
+        echo "timestamp-tag=$timestampTag" >> $env:GITHUB_OUTPUT
+
+outputs:
+  timestamp:
+    description: The generated timestamp
+    value: ${{ steps.get-timestamp.outputs.timestamp }}
+  timestamp-tag:
+    description: The generated timestamp parsed as a usable git tag
+    value: ${{ steps.get-timestamp.outputs.timestamp-tag }}

.github/actions/precompile-orchard1-app/action.yml

@@ -55,7 +55,7 @@ runs:
       if: inputs.repository != ''
       # Using the official checkout action directly, because our wrapper action doesn't have most of the parameters we
       # need here. We only need those parameters for this action though.
-      uses: Lombiq/GitHub-Actions/.github/actions/checkout@dev
+      uses: Lombiq/GitHub-Actions/.github/actions/checkout@issue/OSOE-861
       with:
         repository: ${{ inputs.repository }}
         ref: ${{ inputs.checkout-ref }}

.github/actions/publish-nuget/action.yml

@@ -233,7 +233,7 @@ runs:
         retention-days: ${{ inputs.nuget-artifact-retention-days }}
 
     - name: Create Release
-      uses: Lombiq/GitHub-Actions/.github/actions/release-action@dev
+      uses: Lombiq/GitHub-Actions/.github/actions/release-action@issue/OSOE-861
       # This is to prevent creating releases when pushing tags for issue-specific pre-releases like
       # v4.3.1-alpha.osoe-86.
       if: "!contains(steps.setup.outputs.publish-version, '-')"

.github/actions/release-action/action.yml

@@ -25,6 +25,18 @@ inputs:
     description: An optional tag for the release. If this is omitted the git ref will be used (if it is a tag).
     required: false
     default: ''
+  repo:
+    description: Optionally specify the repo where the release should be generated. Defaults to current repo.
+    required: false
+    default: ''
+  token:
+    description: The GitHub token.
+    required: false
+    default: ${{ github.token }}
+  releaseName:
+    description: An optional name for the release. If this is omitted the tag will be used.
+    required: false
+    default: ''
 
 outputs:
   id:
@@ -49,3 +61,6 @@ runs:
         artifacts: ${{ inputs.artifacts }}
         generateReleaseNotes: ${{ inputs.generateReleaseNotes }}
         tag: ${{ inputs.tag }}
+        repo: ${{ inputs.repo }}
+        token: ${{ inputs.token }}
+        name: ${{ inputs.name }}

.github/actions/remove-old-latest-tags/action.yml

@@ -0,0 +1,24 @@
+name: Remove Old Latest Tags
+description: >
+    Removes the old prefix/latest tag so that a new one can be set.
+
+inputs:
+  tag-prefix:
+    description: The prefix for the tag we are removing.
+    required: true
+
+runs:
+  using: composite
+  steps:
+    - name: Delete Latest Tag
+      shell: pwsh
+      run: |
+        git config user.email '41898282+github-actions[bot]@users.noreply.github.com'
+        git config user.name 'github-actions[bot]'
+        git fetch --tags
+        $latestTag = (git tag --list '${{ inputs.tag-prefix }}/latest')
+        if ($latestTag)
+        {
+            git tag --delete '${{ inputs.tag-prefix }}/latest'
+            git push origin ':refs/tags/${{ inputs.tag-prefix }}/latest'
+        }

.github/workflows/build-and-test-dotnet.yml

@@ -234,7 +234,7 @@ jobs:
           ENVIRONMENT_VARIABLES_JSON: ${{ secrets.ENVIRONMENT_VARIABLES_JSON }}
 
       - name: Checkout
-        uses: Lombiq/GitHub-Actions/.github/actions/checkout@dev
+        uses: Lombiq/GitHub-Actions/.github/actions/checkout@issue/OSOE-861
         with:
           repository: ${{ inputs.repository }}
           ref: ${{ inputs.repository-ref }}
@@ -270,7 +270,7 @@ jobs:
 
       - name: Tests
         if: inputs.test-disable == 'false'
-        uses: Lombiq/GitHub-Actions/.github/actions/test-dotnet@dev
+        uses: Lombiq/GitHub-Actions/.github/actions/test-dotnet@issue/OSOE-861
         with:
           blame-hang-timeout: ${{ inputs.blame-hang-timeout }}
           build-directory: ${{ inputs.build-directory }}

.github/workflows/build-and-test-orchard-core.yml

@@ -267,7 +267,7 @@ jobs:
           Write-Output $message
 
       - name: Checkout
-        uses: Lombiq/GitHub-Actions/.github/actions/checkout@dev
+        uses: Lombiq/GitHub-Actions/.github/actions/checkout@issue/OSOE-861
         with:
           repository: ${{ inputs.repository }}
           ref: ${{ inputs.repository-ref }}
@@ -324,7 +324,7 @@ jobs:
 
       - name: Tests
         if: inputs.test-disable == 'false'
-        uses: Lombiq/GitHub-Actions/.github/actions/test-dotnet@dev
+        uses: Lombiq/GitHub-Actions/.github/actions/test-dotnet@issue/OSOE-861
         with:
           blame-hang-timeout: ${{ inputs.blame-hang-timeout }}
           build-directory: ${{ inputs.build-directory }}

.github/workflows/build-dotnet.yml

@@ -88,7 +88,7 @@ jobs:
           Write-Output '::warning::This workflow is deprecated. Use build-and-test-dotnet instead, that can also execute tests.'
 
       - name: Checkout
-        uses: Lombiq/GitHub-Actions/.github/actions/checkout@dev
+        uses: Lombiq/GitHub-Actions/.github/actions/checkout@issue/OSOE-861
         with:
           token: ${{ secrets.CHECKOUT_TOKEN }}
 

.github/workflows/deploy-orchard1-to-azure-app-service.yml

@@ -128,7 +128,7 @@ jobs:
     timeout-minutes: ${{ inputs.timeout-minutes }}
     steps:
       - name: Checkout
-        uses: Lombiq/GitHub-Actions/.github/actions/checkout@dev
+        uses: Lombiq/GitHub-Actions/.github/actions/checkout@issue/OSOE-861
         with:
           token: ${{ secrets.CHECKOUT_TOKEN }}
 
@@ -183,7 +183,7 @@ jobs:
 
       - name: Add Azure Application Insights Release Annotation
         if: ${{ inputs.application-insights-resource-id != '' }}
-        uses: Lombiq/GitHub-Actions/.github/actions/add-azure-application-insights-release-annotation@dev
+        uses: Lombiq/GitHub-Actions/.github/actions/add-azure-application-insights-release-annotation@issue/OSOE-861
         with:
           release-name: 'Deploy #${{ github.run_number }} to ${{ inputs.slot-name }}'
           application-insights-resource-id: ${{ inputs.application-insights-resource-id }}

.github/workflows/deploy-to-azure-app-service.yml

@@ -132,6 +132,14 @@ on:
         description: >
           Compiles application assemblies as ReadyToRun (R2R) format. R2R is a form of ahead-of-time (AOT) compilation.
           If ready to run is set to `true` the `runtime` input is needed.
+      tag-prefix:
+        type: string
+        default: staging
+        required: false
+        description: >
+          The prefix to use for the tag. If not set, 'staging' will be used as the prefix. The tag will be in the
+          format of "<prefix>/latest" and "<prefix>/<timestamp>". This is used for tracking what's deployed, where and
+          when by tagging the deployed commit.
 
 jobs:
   deploy:
@@ -144,7 +152,7 @@ jobs:
     timeout-minutes: ${{ inputs.timeout-minutes }}
     steps:
       - name: Checkout
-        uses: Lombiq/GitHub-Actions/.github/actions/checkout@dev
+        uses: Lombiq/GitHub-Actions/.github/actions/checkout@issue/OSOE-861
         with:
           token: ${{ secrets.CHECKOUT_TOKEN }}
 
@@ -227,11 +235,28 @@ jobs:
           restart: false
           clean: false
 
+      - name: Create Timestamp
+        id: create-timestamp
+        uses: Lombiq/GitHub-Actions/.github/actions/create-timestamp@issue/OSOE-861
+
       - name: Add Azure Application Insights Release Annotation
-        uses: Lombiq/GitHub-Actions/.github/actions/add-azure-application-insights-release-annotation@dev
+        uses: Lombiq/GitHub-Actions/.github/actions/add-azure-application-insights-release-annotation@issue/OSOE-861
         with:
           release-name: 'Deploy #${{ github.run_number }} to ${{ inputs.slot-name }}'
           application-insights-resource-id: ${{ inputs.application-insights-resource-id }}
+          timestamp: ${{ steps.create-timestamp.outputs.timestamp }}
+
+      - name: Remove Old Latest Tags
+        uses: Lombiq/GitHub-Actions/.github/actions/remove-old-latest-tags@issue/OSOE-861
+        with:
+          tag-prefix: ${{ inputs.tag-prefix }}
+
+      - name: Tag Latest and Add Timestamp Tag
+        run: |
+          git tag '${{ inputs.tag-prefix }}/latest'
+          git push origin 'refs/tags/${{ inputs.tag-prefix }}/latest'
+          git tag '${{ inputs.tag-prefix }}/${{ steps.create-timestamp.outputs.timestamp-tag }}'
+          git push origin 'refs/tags/${{ inputs.tag-prefix }}/${{ steps.create-timestamp.outputs.timestamp-tag }}'
 
       - name: Start Web App Slot
         run: |

.github/workflows/markdown-lint-this-repo.yml

@@ -10,7 +10,7 @@ on:
 jobs:
   markdown-linting:
     name: Markdown Linting
-    uses: Lombiq/GitHub-Actions/.github/workflows/markdown-lint.yml@dev
+    uses: Lombiq/GitHub-Actions/.github/workflows/markdown-lint.yml@issue/OSOE-861
     with:
       globs: '**/*.{md,markdown};!License.md'
       separator: ;

.github/workflows/markdown-lint.yml

@@ -43,7 +43,7 @@ jobs:
     timeout-minutes: ${{ inputs.timeout-minutes }}
     steps:
       - name: Checkout
-        uses: Lombiq/GitHub-Actions/.github/actions/checkout@dev
+        uses: Lombiq/GitHub-Actions/.github/actions/checkout@issue/OSOE-861
         with:
           token: ${{ secrets.CHECKOUT_TOKEN }}
 

.github/workflows/msbuild-and-test.yml

@@ -138,7 +138,7 @@ jobs:
           ENVIRONMENT_VARIABLES_JSON: ${{ secrets.ENVIRONMENT_VARIABLES_JSON }}
 
       - name: Checkout
-        uses: Lombiq/GitHub-Actions/.github/actions/checkout@dev
+        uses: Lombiq/GitHub-Actions/.github/actions/checkout@issue/OSOE-861
         with:
           repository: ${{ inputs.repository }}
           ref: ${{ inputs.repository-ref }}
@@ -162,7 +162,7 @@ jobs:
 
       - name: Tests
         if: inputs.test-disable == 'false'
-        uses: Lombiq/GitHub-Actions/.github/actions/test-dotnet@dev
+        uses: Lombiq/GitHub-Actions/.github/actions/test-dotnet@issue/OSOE-861
         with:
           build-directory: ${{ inputs.build-directory }}
           dotnet-test-process-timeout: ${{ inputs.dotnet-test-process-timeout }}

.github/workflows/publish-nuget.yml

@@ -81,7 +81,7 @@ jobs:
           ENVIRONMENT_VARIABLES_JSON: ${{ secrets.ENVIRONMENT_VARIABLES_JSON }}
 
       - name: Checkout
-        uses: Lombiq/GitHub-Actions/.github/actions/checkout@dev
+        uses: Lombiq/GitHub-Actions/.github/actions/checkout@issue/OSOE-861
         with:
           token: ${{ secrets.CHECKOUT_TOKEN }}
 
@@ -91,7 +91,7 @@ jobs:
           dotnet-version: ${{ inputs.dotnet-version }}
 
       - name: Publish to NuGet
-        uses: Lombiq/GitHub-Actions/.github/actions/publish-nuget@dev
+        uses: Lombiq/GitHub-Actions/.github/actions/publish-nuget@issue/OSOE-861
         with:
           source: ${{ inputs.source }}
           verbosity: ${{ inputs.verbosity }}

.github/workflows/reset-azure-environment.yml

@@ -193,7 +193,7 @@ jobs:
 
       - name: Add Azure Application Insights Release Annotation
         if: ${{ inputs.application-insights-resource-id != '' }}
-        uses: Lombiq/GitHub-Actions/.github/actions/add-azure-application-insights-release-annotation@dev
+        uses: Lombiq/GitHub-Actions/.github/actions/add-azure-application-insights-release-annotation@issue/OSOE-861
         with:
           release-name: 'Reset #${{ github.run_number }} from ${{ inputs.source-slot-name }} to ${{ inputs.destination-slot-name }}'
           application-insights-resource-id: ${{ inputs.application-insights-resource-id }}

.github/workflows/spelling-this-repo.yml

@@ -11,7 +11,7 @@ on:
 jobs:
   spelling:
     name: Spelling
-    uses: Lombiq/GitHub-Actions/.github/workflows/spelling.yml@dev
+    uses: Lombiq/GitHub-Actions/.github/workflows/spelling.yml@issue/OSOE-861
     with:
       additional-dictionaries: |
         cspell:companies/src/companies.txt

.github/workflows/spelling.yml

@@ -94,7 +94,7 @@ jobs:
     timeout-minutes: ${{ inputs.timeout-minutes }}
     steps:
       - name: Checkout
-        uses: Lombiq/GitHub-Actions/.github/actions/checkout@dev
+        uses: Lombiq/GitHub-Actions/.github/actions/checkout@issue/OSOE-861
         with:
           token: ${{ secrets.CHECKOUT_TOKEN }}