feat: Release flow (#851)

<!--- Provide a general summary of your changes in the Title above -->

## Description 💬
<!--- Describe your changes in detail -->

## Motivation and Context 🥅
<!--- Why is this change required? What problem does it solve? -->
<!--- If it fixes an open issue, please link to the issue here. -->

## How has this been tested? 🧪
<!--- Please describe in detail how you tested your changes. -->
<!--- Include details of your testing environment, tests ran to see how
-->
<!--- your change affects other areas of the code, etc. -->
- [ ] Local build ⚒️
- [ ] Local tests 🧪
- [ ] (optional) Local run and endpoint tested in swagger 🚀

## Screenshots (if appropriate) 💻

## Types of changes 🌊
<!--- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [x] Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] Maintenance (e.g. dependency updates, minor rewrites, code style
changes)

## Checklist ☑️

<!--- Go over all the following points, and put an `x` in all the boxes
that apply. -->
<!--- If you're unsure about any of these, don't hesitate to ask. We're
here to help! -->
- [ ] The pull request title starts with the jira case number (when
applicable), e.g. "TEST-1234 Add some feature"
- [ ] The person responsible for following up on requested review
changes has been assigned to the pull request
- [ ] My code follows the code style of this project.
- [ ] My change requires a change to the documentation.
- [ ] I have updated the documentation accordingly.

## Highly optional checks, only use these if you have a reason to do so
✔️

- [ ] This PR changes the database so I have added the *create-diagram*
label to assist reviewers with a db diagram
- [ ] This PR changes platform or backend and I need others to be able
to test against these changes before merging to dev, so I have added the
*deploy-azure* label to deploy before merging the PR

## Checklist for the approver ✅

- [ ] I've checked the files view for spelling issues, code quality
warnings and similar
- [ ] I've waited until all checks have passed (green check/without
error)
- [ ] I've checked that only the intended files are changed

Author: hwinther

.github/dependabot.yml

@@ -10,7 +10,7 @@ updates:
   - "/"
   - "/.github/actions/*/"
   open-pull-requests-limit: 20
-  target-branch: "dev"
+  target-branch: "main"
   schedule:
     interval: "daily"
   assignees:
@@ -22,7 +22,7 @@ updates:
   - "/src/backend/WebApi"
   - "/src/frontend"
   open-pull-requests-limit: 20
-  target-branch: "dev"
+  target-branch: "main"
   schedule:
     interval: "daily"
   assignees:
@@ -31,7 +31,7 @@ updates:
 - package-ecosystem: "nuget"
   directory: "/src/backend"
   open-pull-requests-limit: 20
-  target-branch: "dev"
+  target-branch: "main"
   schedule:
     interval: "daily"
   assignees:
@@ -61,7 +61,7 @@ updates:
 - package-ecosystem: "npm"
   directory: "/src/frontend"
   open-pull-requests-limit: 20
-  target-branch: "dev"
+  target-branch: "main"
   schedule:
     interval: "weekly"
     day: "sunday"
@@ -115,7 +115,7 @@ updates:
 - package-ecosystem: "npm"
   directory: "/tests/playwright"
   open-pull-requests-limit: 20
-  target-branch: "dev"
+  target-branch: "main"
   schedule:
     interval: "weekly"
     day: "sunday"

.github/workflows/backend-ci.yml

@@ -4,7 +4,7 @@ on:
   workflow_dispatch:
   push:
     branches:
-      - dev
+      - main
     tags:
       - "v*"
     paths:
@@ -13,8 +13,6 @@ on:
   pull_request:
     branches:
       - main
-      - test
-      - dev
     paths:
       - "src/backend/**"
       - "tests/backend/**"

.github/workflows/deploy-cd-trigger.yml

@@ -5,9 +5,6 @@ on:
   push:
     branches:
       - main
-      - qa
-      - test
-      - dev
     paths:
       - "src/**"
       - "templates/terraform/**"
@@ -54,42 +51,42 @@ jobs:
           echo "labels=$labels" >> $GITHUB_OUTPUT
           echo "labels=$labels"
 
-  call-deploy-workflow-main:
-    if: ${{ github.ref == 'refs/heads/main' || (github.event_name == 'pull_request' && github.base_ref == 'main' && github.event.pull_request.draft == false) }}
+  deploy-dev:
+    if: ${{ github.ref == 'refs/heads/main' || (github.event_name == 'pull_request' && contains(needs.conditions.outputs.labels, 'deploy-azure')) }}
     needs: [conditions]
     uses: hwinther/test/.github/workflows/deploy-cd.yml@main
     with:
-      deploy_target: prod
-      repo_name: main
+      deploy_target: dev
+      repo_name: dev
       labels: ${{ needs.conditions.outputs.labels }}
     secrets: inherit
 
-  call-deploy-workflow-qa:
-    if: ${{ github.ref == 'refs/heads/qa' || (github.event_name == 'pull_request' && github.base_ref == 'qa' && github.event.pull_request.draft == false) }}
-    needs: [conditions]
-    uses: hwinther/test/.github/workflows/deploy-cd.yml@qa
+  deploy-test:
+    if: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/') }}
+    needs: [conditions, deploy-dev]
+    uses: hwinther/test/.github/workflows/deploy-cd.yml@main
     with:
-      deploy_target: qa
-      repo_name: qa
+      deploy_target: test
+      repo_name: test
       labels: ${{ needs.conditions.outputs.labels }}
     secrets: inherit
 
-  call-deploy-workflow-test:
-    if: ${{ github.ref == 'refs/heads/test' || (github.event_name == 'pull_request' && github.base_ref == 'test' && github.event.pull_request.draft == false) }}
-    needs: [conditions]
-    uses: hwinther/test/.github/workflows/deploy-cd.yml@test
+  deploy-qa:
+    if: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/') }}
+    needs: [conditions, deploy-test]
+    uses: hwinther/test/.github/workflows/deploy-cd.yml@main
     with:
-      deploy_target: test
-      repo_name: test
+      deploy_target: qa
+      repo_name: qa
       labels: ${{ needs.conditions.outputs.labels }}
     secrets: inherit
 
-  call-deploy-workflow-dev:
-    if: ${{ github.ref == 'refs/heads/dev' || (github.event_name == 'pull_request' && contains(needs.conditions.outputs.labels, 'deploy-azure')) }}
-    needs: [conditions]
-    uses: hwinther/test/.github/workflows/deploy-cd.yml@dev
+  deploy-prod:
+    if: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/') }}
+    needs: [conditions, deploy-qa]
+    uses: hwinther/test/.github/workflows/deploy-cd.yml@main
     with:
-      deploy_target: dev
-      repo_name: dev
+      deploy_target: prod
+      repo_name: main
       labels: ${{ needs.conditions.outputs.labels }}
     secrets: inherit

.github/workflows/enable-auto-merge.yml

@@ -30,13 +30,6 @@ jobs:
           PR_NUMBER: ${{ github.event.number }}
         run: gh pr merge --squash --auto $PR_NUMBER
 
-      - name: Enable auto merge on github actions PRs related to environment promotions
-        if: ${{ github.event.pull_request.draft == false && (github.head_ref == 'main' || github.head_ref == 'qa' || github.head_ref == 'test' || github.head_ref == 'dev') }}
-        env:
-          GH_TOKEN: ${{ secrets.WORKFLOW_TOKEN }}
-          PR_NUMBER: ${{ github.event.number }}
-        run: gh pr merge --merge --auto $PR_NUMBER
-
       # Works only for for single person repo, or potentially it can be expanded on with a key for each user
       # - name: Enable auto merge on feature PRs
       #   uses: daneden/enable-automerge-action@v1

.github/workflows/frontend-ci.yml

@@ -4,16 +4,14 @@ on:
   workflow_dispatch:
   push:
     branches:
-      - dev
+      - main
     tags:
       - "v*"
     paths:
       - "src/frontend/**"
   pull_request:
     branches:
       - main
-      - test
-      - dev
     paths:
       - "src/frontend/**"
       - ".github/workflows/frontend-ci.yml"

.github/workflows/playwright-ci.yml

@@ -0,0 +1,53 @@
+name: "Playwright CI"
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - main
+    tags:
+      - "v*"
+    paths:
+      - "/**"
+  pull_request:
+    branches:
+      - main
+    paths:
+      - "tests/playwright/**"
+      - ".github/workflows/playwright-ci.yml"
+    types: [opened, reopened, labeled, synchronize, ready_for_review]
+
+# Sets permissions of the GITHUB_TOKEN to allow creating checks and updating PR
+permissions:
+  contents: read
+  checks: write
+  pull-requests: write
+
+# This allows a subsequently queued workflow run to interrupt previous runs
+concurrency:
+  group: "${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}"
+  cancel-in-progress: true
+
+env:
+  NODE_VERSION: "24"
+  WORKFLOW_SHORT_NAME: "playwright"
+  FRONTEND_PATH: "tests/playwright"
+  TRAILING_AGENT_WORK_PATH: "/home/runner/work/test/test/"
+  GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    if: ${{ github.event_name != 'pull_request' || github.event.pull_request.draft == false }}
+    defaults:
+      run:
+        working-directory: ${{ env.FRONTEND_PATH }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - uses: ./.github/actions/frontend-build
+        with:
+          working_directory: ${{ env.FRONTEND_PATH }}
+          package_manager: "npm"
+          run_tests: "true"

.github/workflows/playwright-env.yml

@@ -2,16 +2,9 @@ name: "Playwright e2e tests - environment"
 
 on:
   workflow_dispatch:
-  push:
-    branches:
-      - qa
-      - test
   pull_request:
     branches:
       - main
-      - qa
-      - test
-      - dev
       - "feature/*"
       - "bugfix/*"
     paths:
@@ -30,33 +23,33 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  call-workflow-main:
+  # call-workflow-main:
+  #   if: ${{ github.ref == 'refs/heads/main' || (github.event_name == 'pull_request' && github.base_ref == 'main' && github.event.pull_request.draft == false) }}
+  #   uses: hwinther/test/.github/workflows/playwright.yml@main
+  #   with:
+  #     deploy_target: prod
+  #     repo_name: main
+  #     url_prefix: ""
+  #   secrets: inherit
+  # call-workflow-qa:
+  #   if: ${{ github.ref == 'refs/heads/qa' || (github.event_name == 'pull_request' && github.base_ref == 'qa' && github.event.pull_request.draft == false) }}
+  #   uses: hwinther/test/.github/workflows/playwright.yml@main
+  #   with:
+  #     deploy_target: qa
+  #     repo_name: qa
+  #     url_prefix: qa-
+  #   secrets: inherit
+  # call-workflow-test:
+  #   if: ${{ github.ref == 'refs/heads/test' || (github.event_name == 'pull_request' && github.base_ref == 'test' && github.event.pull_request.draft == false) }}
+  #   uses: hwinther/test/.github/workflows/playwright.yml@main
+  #   with:
+  #     deploy_target: test
+  #     repo_name: test
+  #     url_prefix: test-
+  #   secrets: inherit
+  call-workflow-dev:
     if: ${{ github.ref == 'refs/heads/main' || (github.event_name == 'pull_request' && github.base_ref == 'main' && github.event.pull_request.draft == false) }}
     uses: hwinther/test/.github/workflows/playwright.yml@main
-    with:
-      deploy_target: prod
-      repo_name: main
-      url_prefix:
-    secrets: inherit
-  call-workflow-qa:
-    if: ${{ github.ref == 'refs/heads/qa' || (github.event_name == 'pull_request' && github.base_ref == 'qa' && github.event.pull_request.draft == false) }}
-    uses: hwinther/test/.github/workflows/playwright.yml@qa
-    with:
-      deploy_target: qa
-      repo_name: qa
-      url_prefix: qa-
-    secrets: inherit
-  call-workflow-test:
-    if: ${{ github.ref == 'refs/heads/test' || (github.event_name == 'pull_request' && github.base_ref == 'test' && github.event.pull_request.draft == false) }}
-    uses: hwinther/test/.github/workflows/playwright.yml@test
-    with:
-      deploy_target: test
-      repo_name: test
-      url_prefix: test-
-    secrets: inherit
-  call-workflow-dev:
-    if: ${{ github.ref == 'refs/heads/dev' || (github.event_name == 'pull_request' && github.base_ref == 'dev' && github.event.pull_request.draft == false) }}
-    uses: hwinther/test/.github/workflows/playwright.yml@dev
     with:
       deploy_target: dev
       repo_name: dev