[BRE-1522] Update publish mobile GitHub release with test workflow

[gitclonebrian]

🎟️ Tracking

BRE-1522

📔 Objective

Adds a regression test workflow for _publish-mobile-github-release.yml that runs automatically on PRs that change it, along with documentation.

Files Added

test-publish-mobile-github-release.yml

Regression test workflow triggered on PRs that change _publish-mobile-github-release.yml. Creates a test draft release in this repo with a unique tag and test version in the title, calls the base workflow in dry_run mode with a fake store version check command, then cleans up the draft regardless of outcome.
The production check_release_command uses Fastlane to query the App Store or Play Store, which requires store credentials not available in this repo. The fake command simply echoes a version string that matches the draft release title, allowing the base workflow to continue without making any actual API calls to the stores.

README.md
Documents the base workflow and the regression testing approach.

Files Modified

_publish-mobile-github-release.yml

Changes required to support the test:

• In production, the ruby setup reads the ruby version from the .ruby-version file in the iOS or Android repo. When the workflow is executed by the test workflow, there won't be a version file in this repo. Added a detection step that defaults to Ruby 3.2 if no .ruby-version file exists.
• When this workflow is executed by the test workflow, it won't have permission to download the store credential files from Azure Blob Storage. Added a conditional that skips the credential download step when the credentials_filename input is empty.
• Sonar doesn't allow secrets: inherit. Secrets being passed into reusabale workflows need to be explicitly listed instead. When doing that in the calling workflow, the reusable workflow also needs the secrets explicitly listed.

🚨 Breaking Changes

The changes to _publish-mobile-github-release.yml listed above shouldn't break the current production runs, but should be noted.

[github-actions]

Checkmarx One – Scan Summary & Details – 3697848e-d32e-4e60-bbc1-d3d145343c48

Great job! No new security vulnerabilities introduced in this pull request

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud