OSOE-861: Add Git tags for Azure deployments and swaps

.github/actions/publish-nuget/action.yml

@@ -221,7 +221,7 @@ runs:
         retention-days: ${{ inputs.nuget-artifact-retention-days }}
 
     - name: Create Release
-      uses: Lombiq/GitHub-Actions/.github/actions/release-action@dev
+      uses: Lombiq/GitHub-Actions/.github/actions/release-action@issue/OSOE-861
       # This is to prevent creating releases when pushing tags for issue-specific pre-releases like
       # v4.3.1-alpha.osoe-86.
       if: "!contains(steps.setup.outputs.publish-version, '-')"

.github/actions/release-action/action.yml

@@ -25,6 +25,14 @@ inputs:
     description: An optional tag for the release. If this is omitted the git ref will be used (if it is a tag).
     required: false
     default: ''
+  repo:
+    description: Optionally specify the repo where the release should be generated. Defaults to current repo.
+    required: false
+    default: ''
+  token:
+    description: The GitHub token.
+    required: false
+    default: ${{ github.token }}
 
 outputs:
   id:
@@ -49,3 +57,5 @@ runs:
         artifacts: ${{ inputs.artifacts }}
         generateReleaseNotes: ${{ inputs.generateReleaseNotes }}
         tag: ${{ inputs.tag }}
+        repo: ${{ inputs.repo }}
+        token: ${{ inputs.token }}

.github/workflows/deploy-to-azure-app-service.yml

@@ -132,6 +132,13 @@ on:
         description: >
           Compiles application assemblies as ReadyToRun (R2R) format. R2R is a form of ahead-of-time (AOT) compilation.
           If ready to run is set to `true` the `runtime` input is needed.
+      tag-prefix:
+        type: string
+        required: false
+        default: ${{ inputs.slot-name }}
+        description: >
+          The prefix to use for the tag. If not set, the slot name will be used as the prefix. The tag will be in the
+          format of "<prefix>/latest" and "<prefix>/<timestamp>".
 
 jobs:
   deploy:
@@ -247,6 +254,33 @@ jobs:
             -WebAppName ${{ inputs.app-name }} `
             -SlotName ${{ inputs.slot-name }}
 
+      - name: Fetch tags
+        id: fetch-tags
+        run: |
+          git fetch --tags
+
+      - name: Determine timestamp
+        id: determine-timestamp
+        run: |
+          # Get the current timestamp in the format of yyyy-MM-dd-HH.mmUTC - can't use : in tags
+          "timestamp=$(Get-Date -Format 'yyyy-MM-dd-HH.mmUTC')" >> $Env:GITHUB_OUTPUT
+
+      - name: Delete Old prefix/latest Tag
+        run: |
+          $latestTag = (git tag -l '${{ inputs.tag-prefix }}/latest')
+          if ($latestTag)
+          {
+              git tag -d '${{ inputs.tag-prefix }}/latest'
+              git push origin ':refs/tags/${{ inputs.tag-prefix }}/latest'
+          }
+
+      - name: Tag Latest and add Timestamp Tag
+        run: |
+          git tag '${{ inputs.tag-prefix }}/latest'
+          git push origin tag '${{ inputs.tag-prefix }}/latest'
+          git tag '${{ inputs.tag-prefix }}/${{steps.determine-timestamp.outputs.timestamp}}'
+          git push origin tag '${{ inputs.tag-prefix }}/${{steps.determine-timestamp.outputs.timestamp}}'
+
       - name: Cancel Workflow on Failure
         if: failure() && inputs.cancel-workflow-on-failure == 'true'
         uses: Lombiq/GitHub-Actions/.github/actions/cancel-workflow@dev

.github/workflows/publish-nuget.yml

@@ -75,7 +75,7 @@ jobs:
           dotnet-version: ${{ inputs.dotnet-version }}
 
       - name: Publish to NuGet
-        uses: Lombiq/GitHub-Actions/.github/actions/publish-nuget@dev
+        uses: Lombiq/GitHub-Actions/.github/actions/publish-nuget@issue/OSOE-861
         with:
           source: ${{ inputs.source }}
           verbosity: ${{ inputs.verbosity }}

.github/workflows/swap-azure-web-app-slots.yml

@@ -29,6 +29,13 @@ on:
           The ID of the Azure Subscription the resources are under, which will be mapped to the subscription-id
           parameter when calling azure/login. You can look this up e.g. in the Azure Portal under any resource or the
           subscription itself.
+      TAG_DEPLOYMENT_TOKEN:
+        default: ${{ github.token }}
+        required: false
+        description: >
+          An authentication token, like a personal access token (PAT) that gives access to the other repository.
+          This is necessary because the repository that triggered the workflow and the repository that the workflow is
+          running on are different in this case.
 
     inputs:
       cancel-workflow-on-failure:
@@ -69,6 +76,26 @@ on:
         description: >
           ID of the Application Insights resource that the release annotation for the swap should be added to.
           This can e.g. be looked up on the Azure Portal under the given AI resource's Overview page -> JSON View.
+      swap-code-repo:
+        type: string
+        default: ''
+        required: false
+        description: >
+          The repository that hosts the code that will be swapped. This is necessary for adding tags.
+      tag-prefix:
+        type: string
+        default: ${{ inputs.destination-slot-name }}
+        required: false
+        description: >
+          The prefix for the tags that will be added to the swap-code-repo. If not set, the slot name will be used as
+          the prefix. The tag will be in the format of "<prefix>/latest" and "<prefix>/<timestamp>".
+      swap-prefix:
+        type: string
+        default: ${{ inputs.source-slot-name }}
+        required: false
+        description: >
+          The prefix of the deployment tag that we will be looking for in the swap-code-repo. If not set, the source
+          slot name will be used as the prefix.
 
 jobs:
   swap-azure-web-app-slots:
@@ -118,6 +145,80 @@ jobs:
             -WebAppName ${{ inputs.app-name }} `
             -SlotName ${{ inputs.destination-slot-name }}
 
+      - name: Checkout Repository
+        if: inputs.swap-code-repo != ''
+        uses: Lombiq/GitHub-Actions/.github/actions/checkout@dev
+        with:
+          repository: ${{ inputs.swap-code-repo }}
+          token: ${{ secrets.TAG_DEPLOYMENT_TOKEN }}
+
+      - name: Setup Git Config
+        if: inputs.swap-code-repo != ''
+        run: |
+            git config user.email '41898282+github-actions[bot]@users.noreply.github.com'
+            git config user.name 'github-actions[bot]'
+
+      - name: Fetch tags
+        if: inputs.swap-code-repo != ''
+        run: |
+            git fetch --tags
+
+      - name: Determine timestamp
+        if: inputs.swap-code-repo != ''
+        id: determine-timestamp
+        run: |
+            # Get the current timestamp in the format of yyyy-MM-dd-HH.mmUTC - can't use : in tags
+            "timestamp=$(Get-Date -Format 'yyyy-MM-dd-HH.mmUTC')" >> $Env:GITHUB_OUTPUT
+
+      - name: Delete Old prefix/latest tag
+        if: inputs.swap-code-repo != ''
+        run: |
+            $latestTag = (git tag -l '${{ inputs.tag-prefix }}/latest')
+            if ($latestTag)
+            {
+                git tag -d '${{ inputs.tag-prefix }}/latest'
+                git push origin ':refs/tags/${{ inputs.tag-prefix }}/latest'
+            }
+
+      - name: Move Latest Tag (Swap) and Add Timestamp Tag
+        if: inputs.swap-code-repo != ''
+        run: |
+            if([string]::IsNullOrEmpty('${{ inputs.tag-prefix }}'))
+            {
+                throw 'Tag prefix not set, exiting'
+            }
+
+            $tagExists = (git tag -l '${{ inputs.swap-prefix }}/latest')
+            if ([string]::IsNullOrEmpty($tagExists))
+            {
+                throw 'No latest tag found for swap prefix'
+            }
+
+            $latest = (git rev-list -n 1 '${{ inputs.swap-prefix }}/latest')
+            if ($latest)
+            {
+                git tag -a '${{ inputs.tag-prefix }}/latest' $latest -m 'Latest tag for ${{ inputs.tag-prefix }}'
+                git push origin tag '${{ inputs.tag-prefix }}/latest'
+                $gitMessage = 'Swap tagged at ${{steps.determine-timestamp.outputs.timestamp}}'
+                git tag -a '${{ inputs.tag-prefix }}/${{steps.determine-timestamp.outputs.timestamp}}' $latest -m $gitMessage
+                git push origin tag '${{ inputs.tag-prefix }}/${{steps.determine-timestamp.outputs.timestamp}}'
+            }
+            else
+            {
+                throw "No latest tag found for swap prefix"
+            }
+
+      - name: Create Release
+        uses: Lombiq/GitHub-Actions/.github/actions/release-action@issue/OSOE-861
+        if: inputs.swap-code-repo != ''
+        with:
+          repo: ${{ inputs.swap-code-repo }}
+          token: ${{ secrets.TAG_DEPLOYMENT_TOKEN }}
+          tag: ${{ inputs.tag-prefix }}/latest
+          allowUpdates: true
+          generateReleaseNotes: true
+          artifacts: artifacts/*.nupkg, artifacts/*.snupkg
+
       - name: Cancel Workflow on Failure
         if: failure() && inputs.cancel-workflow-on-failure == 'true'
         uses: Lombiq/GitHub-Actions/.github/actions/cancel-workflow@dev

.github/workflows/tag-version-this-repo.yml

@@ -9,7 +9,7 @@ jobs:
   run:
     name: Tag Version Automation
     if: github.event.pusher.name != 'LombiqBot'
-    uses: Lombiq/GitHub-Actions/.github/workflows/tag-version.yml@dev
+    uses: Lombiq/GitHub-Actions/.github/workflows/tag-version.yml@issue/OSOE-861
     with:
       additional-pattern-include-list: '@("https://raw.githubusercontent.com/Lombiq/GitHub-Actions/(?<ref>[\w\./-]*)/.github")'
     secrets:

.github/workflows/tag-version.yml

@@ -106,7 +106,7 @@ jobs:
         run: git push --tags --force
 
       - name: Create Release
-        uses: Lombiq/GitHub-Actions/.github/actions/release-action@dev
+        uses: Lombiq/GitHub-Actions/.github/actions/release-action@issue/OSOE-861
         # This is to prevent creating releases when pushing tags for issue-specific pre-releases like
         # v4.3.1-alpha.osoe-86.
         if: "!contains(steps.determine-tag.outputs.tagname, '-')"