Split release docs tasks (#8607)

Author: pdabelf5

.github/workflows/release-pr.yml

@@ -53,7 +53,8 @@ permissions:
   contents: read
 
 jobs:
-  release:
+  nic-release-pr:
+    name: Update NIC versions in local files and create PR
     permissions:
       contents: write
       pull-requests: write
@@ -97,17 +98,7 @@ jobs:
             ${{ inputs.new_version }} \
             ${{ inputs.new_helm_version }} \
             ${{ inputs.new_operator_version }}
-          pip install --require-hashes -r .github/scripts/requirements.txt --no-deps
-          .github/scripts/release-docs.sh \
-            ${{ inputs.new_version }} \
-            ${{ inputs.new_helm_version }} \
-            ${{ inputs.new_operator_version }} \
-            "${{ inputs.k8s_versions }}" \
-            "${{ inputs.release_date }}"
         env:
-          GITHUB_USERNAME: nginx-bot
-          GITHUB_EMAIL: [email protected]
-          GITHUB_TOKEN: ${{ steps.secrets.outputs.NGINX_PAT }}
           DRY_RUN: ${{ inputs.dry_run && 'true' || 'false' }}
           DEBUG: ${{ inputs.debug && 'true' || 'false' }}
 
@@ -122,3 +113,45 @@ jobs:
           body: |
             This automated PR updates the docs for ${{ github.event.inputs.new_version }} release.
         if: ${{ ! inputs.dry_run }}
+
+  docs-release-pr:
+    name: Update NIC versions in NGINX documentation and create PR
+    permissions:
+      contents: write
+      pull-requests: write
+      id-token: write
+    runs-on: ubuntu-24.04
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+
+      - name: Azure login
+        uses: azure/login@a457da9ea143d694b1b9c7c869ebb04ebe844ef5 # v2.3.0
+        with:
+          client-id: ${{ secrets.AZURE_COMMON_VAULT_CLIENT_ID }}
+          tenant-id: ${{ secrets.AZURE_COMMON_VAULT_TENANT_ID }}
+          subscription-id: ${{ secrets.AZURE_COMMON_VAULT_SUBSCRIPTION_ID }}
+
+      - name: Setup secrets
+        id: secrets
+        run: |
+          echo "Setting secrets for job"
+          NGINX_PAT=$(az keyvault secret show --name nginx-bot-pat --vault-name ${{ secrets.COMMON_KEYVAULT_NAME }} --query value -o tsv)
+          echo "::add-mask::$NGINX_PAT"
+          echo "NGINX_PAT=$NGINX_PAT" >> $GITHUB_OUTPUT
+
+      - name: Update Documentation Versions
+        run: |
+          pip install --require-hashes -r .github/scripts/requirements.txt --no-deps
+          .github/scripts/release-docs.sh \
+            ${{ inputs.new_version }} \
+            ${{ inputs.new_helm_version }} \
+            ${{ inputs.new_operator_version }} \
+            "${{ inputs.k8s_versions }}" \
+            "${{ inputs.release_date }}"
+        env:
+          GITHUB_USERNAME: nginx-bot
+          GITHUB_EMAIL: [email protected]
+          GITHUB_TOKEN: ${{ steps.secrets.outputs.NGINX_PAT }}
+          DRY_RUN: ${{ inputs.dry_run && 'true' || 'false' }}
+          DEBUG: ${{ inputs.debug && 'true' || 'false' }}