wip

Author: MaciejKaras

.github/workflows/preview_release_notes.yml

@@ -13,6 +13,9 @@ jobs:
   preview_release_notes:
     name: Preview Release Notes
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      issues: write
     steps:
       - name: Check out repository
         uses: actions/checkout@v4
@@ -24,9 +27,16 @@ jobs:
           python-version: '${{ vars.PYTHON_VERSION }}'
       - name: Generate Release Notes
         id: generate_release_notes
-        run: python -m scripts.release.release_notes -s $INITIAL_COMMIT_SHA -v $INITIAL_VERSION -o release_notes_tmp.md
+        run: |
+          python -m scripts.release.release_notes -s $INITIAL_COMMIT_SHA -v $INITIAL_VERSION -o release_notes_tmp.md
         env:
           INITIAL_COMMIT_SHA: ${{ vars.RELEASE_INITIAL_COMMIT_SHA }}
           INITIAL_VERSION: ${{ vars.RELEASE_INITIAL_VERSION }}
       - name: Summarize results
         run: echo $(cat release_notes_tmp.md) >> $GITHUB_STEP_SUMMARY
+      - name: Update PR comment
+        run: |
+          gh issue comment $ISSUE --edit-last --create-if-none --body-file release_notes_tmp.md
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          ISSUE: ${{ github.event.issue.html_url }}

.github/workflows/require_changelog.yml

@@ -11,8 +11,10 @@ on:
 
 jobs:
   validate-changelog:
-    name: Check for valid changelog entry in Pull Request
+    name: Check for valid changelog entry
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - name: Check out repository
         uses: actions/checkout@v4
@@ -23,7 +25,8 @@ jobs:
         with:
           python-version: '${{ vars.PYTHON_VERSION }}'
       - name: Check if changelog entry file was added in this PR
-        run: python -m scripts.release.check_changelog -b $BASE_SHA -f $FAIL_ON_NO_CHANGES >> $GITHUB_STEP_SUMMARY
+        run: |
+          python -m scripts.release.check_changelog -b $BASE_SHA -f $FAIL_ON_NO_CHANGES | tee >> $GITHUB_STEP_SUMMARY
         env:
           BASE_SHA: ${{ github.event.pull_request.base.sha }}
           FAIL_ON_NO_CHANGES: ${{ !contains(github.event.pull_request.labels.*.name, 'skip-changelog') }}