test release automation

[Krishna-kg732]

Test release

[google-oss-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign gaocegege for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[github-actions]

🎉 Welcome to the Kubeflow Trainer! 🎉

Thanks for opening your first PR! We're happy to have you as part of our community 🚀

Here's what happens next:

• If you haven't already, please check out our Contributing Guide for repo-specific guidelines and the Kubeflow Contributor Guide for general community standards.
• Our team will review your PR soon! cc @kubeflow/kubeflow-trainer-team

Join the community:

• Slack: Join our #kubeflow-trainer Slack channel.
• Meetings: Attend the Kubeflow AutoML and Training Working Group bi-weekly meetings.

Feel free to ask questions in the comments if you need any help or clarification!
Thanks again for contributing to Kubeflow! 🙏

[Copilot]

Pull request overview

This PR introduces comprehensive release automation infrastructure for the Kubeflow Trainer project and updates version information for what appears to be a test release. The PR title indicates v2.2.0, but the actual changes reference v2.2.2, and test data from a v99.0.0 release is also present.

Changes:

• Adds release automation scripts and workflows (release.sh, release.yaml, check-release.yaml)
• Adds changelog generation configuration (cliff.toml)
• Updates version to v2.2.2 across all manifests, charts, and API files
• Includes documentation for testing the release process on forks

Reviewed changes

Copilot reviewed 19 out of 19 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
hack/release.sh	New bash script to automate release preparation including version updates and changelog generation
.github/workflows/release.yaml	Main release workflow that builds, tags, and publishes releases with PyPI OIDC publishing
.github/workflows/check-release.yaml	PR validation workflow to ensure version consistency before merging
.github/workflows/build-and-push-images.yaml	Updated to support workflow_dispatch and publish on manual triggers
.github/workflows/publish-helm-charts.yaml	Updated to support workflow_dispatch for manual chart publishing
.github/workflows/template-publish-image/action.yaml	Added tagging support for workflow_dispatch events
.github/workflows/check-pr-title.yaml	Added area/release label to skip PR title checks for release PRs
cliff.toml	Configuration for git-cliff changelog generation tool
Makefile	Added release target to invoke release.sh
docs/release/RELEASE_TESTING.md	Comprehensive guide for testing the release process on forks
VERSION	Updated to v2.2.2
manifests/overlays/runtimes/kustomization.yaml	Updated image tags to v2.2.2
manifests/overlays/manager/kustomization.yaml	Updated image tag and configmap version to v2.2.2
manifests/overlays/data-cache/kustomization.yaml	Updated image tag to v2.2.2
manifests/base/runtimes/data-cache/torch_distributed_with_cache.yaml	Updated data-cache image to v99.0.0 (appears to be test data)
charts/kubeflow-trainer/Chart.yaml	Updated chart version to 2.2.2
charts/kubeflow-trainer/README.md	Updated version badge to 2.2.2
api/python_api/kubeflow_trainer_api/init.py	Updated Python API version to 2.2.2
CHANGELOG.md	Added changelog entries for v2.2.2 and v99.0.0 (test data)

[Copilot]

This image tag version v99.0.0 appears to be test data that should not be included in a production release. The version should match the release version v2.2.2 (or v2.2.0 based on the PR title).

Suggested change

	value: "ghcr.io/kubeflow/trainer/data-cache:v99.0.0"
	value: "ghcr.io/kubeflow/trainer/data-cache:v2.2.2"

[Copilot]

The CHANGELOG contains entries for both v2.2.2 and v99.0.0 releases. The v99.0.0 entry appears to be test data from testing the release automation and should be removed before merging this PR.

[Copilot]

The CHANGELOG includes a commit referencing v99.0.0 in the v2.2.2 release notes. This test data should be removed as it will confuse users about the actual release history.

Suggested change

- chore(release): Release v99.0.0 (@krishna-kg732)

[Copilot]

The PR title indicates this is a release for v2.2.0, but all version files have been updated to v2.2.2. This mismatch suggests either the PR title is incorrect or the wrong version was used in the release script.

[Copilot]

The docker run invocation uses the mutable image tag ghcr.io/orhun/git-cliff/git-cliff:latest and passes the GITHUB_TOKEN environment into the container, which creates a concrete supply-chain risk: if that third-party image is ever compromised, it can exfiltrate the token and tamper with release artifacts. This script will be used with real PATs or GitHub tokens, so a malicious or hijacked latest image would immediately gain access to repository and workflow permissions. Pin this image to an immutable digest or vetted version tag and avoid passing GITHUB_TOKEN into the container unless the token’s scope is strictly minimized and required for the operation.