Fix post-release workflow execution

cipolleschi · cipolleschi · commit 8bb110d0c0f0 · 2026-07-27T18:03:34.000+01:00
diff --git a/.github/workflows/bump-podfile-lock.yml b/.github/workflows/bump-podfile-lock.yml
@@ -2,6 +2,13 @@ name: Bump Podfile.lock
 
 on:
   workflow_call: # this directive allow us to call this workflow from other workflows
+    inputs:
+      releaseVersion:
+        required: false
+        type: string
+      checkoutRef:
+        required: false
+        type: string
 
 jobs:
   bump-podfile-lock:
@@ -11,6 +18,7 @@ jobs:
         uses: actions/checkout@v6
         with:
           token: ${{ secrets.REACT_NATIVE_BOT_GITHUB_TOKEN }}
+          ref: ${{ inputs.checkoutRef || github.ref }}
           fetch-depth: 0
           fetch-tags: true
       - name: Install dependencies
@@ -23,7 +31,7 @@ jobs:
         uses: ./.github/actions/setup-xcode
       - name: Extract branch name
         run: |
-          TAG="${{ github.ref_name }}";
+          TAG="${{ inputs.releaseVersion || github.ref_name }}";
           BRANCH_NAME=$(echo "$TAG" | sed -E 's/v([0-9]+\.[0-9]+)\.[0-9]+(-rc\.[0-9]+)?/\1-stable/')
           echo "Branch Name is $BRANCH_NAME"
           echo "BRANCH_NAME=$BRANCH_NAME" >> $GITHUB_ENV
diff --git a/.github/workflows/create-draft-release.yml b/.github/workflows/create-draft-release.yml
@@ -3,6 +3,12 @@ name: Create Draft Release
 on:
   workflow_call:
     inputs:
+      releaseVersion:
+        required: false
+        type: string
+      checkoutRef:
+        required: false
+        type: string
       hermesVersion:
         required: false
         type: string
@@ -20,6 +26,7 @@ jobs:
         uses: actions/checkout@v6
         with:
           token: ${{ secrets.REACT_NATIVE_BOT_GITHUB_TOKEN }}
+          ref: ${{ inputs.checkoutRef || github.ref }}
           fetch-depth: 0
           fetch-tags: true
       - name: Install dependencies
@@ -35,7 +42,7 @@ jobs:
         with:
           script: |
             const {createDraftRelease} = require('./.github/workflow-scripts/createDraftRelease.js');
-            const version = '${{ github.ref_name }}';
+            const version = '${{ inputs.releaseVersion || github.ref_name }}';
             const {isLatest} = require('./.github/workflow-scripts/publishTemplate.js');
             return (await createDraftRelease(version, isLatest(), '${{secrets.REACT_NATIVE_BOT_GITHUB_TOKEN}}', '${{ inputs.hermesVersion }}', '${{ inputs.hermesV1Version }}')).id;
           result-encoding: string
@@ -46,7 +53,7 @@ jobs:
         with:
           script: |
             const {uploadReleaseAssetsForDotSlashFiles} = require('./scripts/releases/upload-release-assets-for-dotslash.js');
-            const version = '${{ github.ref_name }}';
+            const version = '${{ inputs.releaseVersion || github.ref_name }}';
             await uploadReleaseAssetsForDotSlashFiles({
               version,
               token: '${{secrets.REACT_NATIVE_BOT_GITHUB_TOKEN}}',
diff --git a/.github/workflows/generate-changelog.yml b/.github/workflows/generate-changelog.yml
@@ -2,6 +2,13 @@ name: Generate Changelog
 
 on:
   workflow_call:
+    inputs:
+      releaseVersion:
+        required: false
+        type: string
+      checkoutRef:
+        required: false
+        type: string
 
 jobs:
   generate-changelog:
@@ -11,6 +18,7 @@ jobs:
         uses: actions/checkout@v6
         with:
           token: ${{ secrets.REACT_NATIVE_BOT_GITHUB_TOKEN }}
+          ref: ${{ inputs.checkoutRef || github.ref }}
           fetch-depth: 0
           fetch-tags: true
       - name: Install dependencies
@@ -25,5 +33,5 @@ jobs:
         with:
           script: |
             const {generateChangelog} = require('./.github/workflow-scripts/generateChangelog');
-            const version = '${{ github.ref_name }}';
+            const version = '${{ inputs.releaseVersion || github.ref_name }}';
             await generateChangelog(version, '${{secrets.REACT_NATIVE_BOT_GITHUB_TOKEN}}');
diff --git a/.github/workflows/publish-npm.yml b/.github/workflows/publish-npm.yml
@@ -23,6 +23,11 @@ on:
       - 'main'
       - '*-stable'
   workflow_dispatch:
+    inputs:
+      release-tag:
+        description: Tag whose successful publish needs post-release recovery
+        required: false
+        type: string
   # nightly build @ 2:15 AM UTC
   schedule:
     - cron: '15 2 * * *'
@@ -38,12 +43,24 @@ jobs:
     outputs:
       mode: ${{ steps.mode.outputs.mode }}
       release-type: ${{ steps.mode.outputs.release-type }}
+      release-tag: ${{ steps.mode.outputs.release-tag }}
     steps:
       - id: mode
+        env:
+          RECOVERY_RELEASE_TAG: ${{ inputs.release-tag }}
         run: |
           if [[ "${{ github.ref_type }}" == "tag" ]]; then
             echo "mode=release" >> $GITHUB_OUTPUT
             echo "release-type=release" >> $GITHUB_OUTPUT
+            echo "release-tag=${{ github.ref_name }}" >> $GITHUB_OUTPUT
+          elif [[ -n "$RECOVERY_RELEASE_TAG" ]]; then
+            if [[ ! "$RECOVERY_RELEASE_TAG" =~ ^v0\.[0-9]+\.[0-9]+(-rc\.[0-9]+)?$ ]]; then
+              echo "Invalid release tag: $RECOVERY_RELEASE_TAG" >&2
+              exit 1
+            fi
+            echo "mode=post-release" >> $GITHUB_OUTPUT
+            echo "release-type=" >> $GITHUB_OUTPUT
+            echo "release-tag=$RECOVERY_RELEASE_TAG" >> $GITHUB_OUTPUT
           elif [[ "${{ github.event_name }}" == "schedule" || "${{ github.event_name }}" == "workflow_dispatch" ]]; then
             echo "mode=nightly" >> $GITHUB_OUTPUT
             echo "release-type=nightly" >> $GITHUB_OUTPUT
@@ -54,17 +71,21 @@ jobs:
       - run: |
           echo "Mode: ${{ steps.mode.outputs.mode }}"
           echo "Release type: ${{ steps.mode.outputs.release-type }}"
+          echo "Release tag: ${{ steps.mode.outputs.release-tag }}"
 
   # ─── Release-only: extract Hermes version for draft release ──────
   set_hermes_versions:
     runs-on: ubuntu-latest
-    if: github.ref_type == 'tag'
+    needs: [determine_mode]
+    if: needs.determine_mode.outputs.mode == 'release' || needs.determine_mode.outputs.mode == 'post-release'
     outputs:
       HERMES_VERSION: ${{ steps.set_hermes_versions.outputs.HERMES_VERSION }}
       HERMES_V1_VERSION: ${{ steps.set_hermes_versions.outputs.HERMES_V1_VERSION }}
     steps:
       - name: Checkout
         uses: actions/checkout@v6
+        with:
+          ref: ${{ needs.determine_mode.outputs.release-tag }}
       - id: set_hermes_versions
         run: |
           echo "Setting hermes versions to latest"
@@ -209,13 +230,18 @@ jobs:
   post_publish:
     runs-on: ubuntu-latest
     needs: [determine_mode, publish_react_native]
-    if: needs.determine_mode.outputs.mode == 'release'
+    if: |
+      always() &&
+      needs.determine_mode.result == 'success' &&
+      ((needs.determine_mode.outputs.mode == 'release' && needs.publish_react_native.result == 'success') ||
+       needs.determine_mode.outputs.mode == 'post-release')
     env:
       REACT_NATIVE_BOT_GITHUB_TOKEN: ${{ secrets.REACT_NATIVE_BOT_GITHUB_TOKEN }}
     steps:
       - name: Checkout
         uses: actions/checkout@v6
         with:
+          ref: ${{ needs.determine_mode.outputs.release-tag }}
           fetch-depth: 0
           fetch-tags: true
       - name: Publish @react-native-community/template
@@ -225,7 +251,7 @@ jobs:
           github-token: ${{ secrets.REACT_NATIVE_BOT_GITHUB_TOKEN }}
           script: |
             const {publishTemplate} = require('./.github/workflow-scripts/publishTemplate.js')
-            const version = "${{ github.ref_name }}"
+            const version = "${{ needs.determine_mode.outputs.release-tag }}"
             const isDryRun = false
             await publishTemplate(github, version, isDryRun);
       - name: Wait for template to be published
@@ -235,14 +261,14 @@ jobs:
           github-token: ${{ secrets.REACT_NATIVE_BOT_GITHUB_TOKEN }}
           script: |
             const {verifyPublishedTemplate, isLatest} = require('./.github/workflow-scripts/publishTemplate.js')
-            const version = "${{ github.ref_name }}"
+            const version = "${{ needs.determine_mode.outputs.release-tag }}"
             await verifyPublishedTemplate(version, isLatest());
       - name: Update rn-diff-purge to generate upgrade-support diff
         run: |
           curl -X POST https://api.github.com/repos/react-native-community/rn-diff-purge/dispatches \
             -H "Accept: application/vnd.github.v3+json" \
             -H "Authorization: Bearer $REACT_NATIVE_BOT_GITHUB_TOKEN" \
-            -d "{\"event_type\": \"publish\", \"client_payload\": { \"version\": \"${{ github.ref_name }}\" }}"
+            -d "{\"event_type\": \"publish\", \"client_payload\": { \"version\": \"${{ needs.determine_mode.outputs.release-tag }}\" }}"
       - name: Verify Release is on NPM
         timeout-minutes: 3
         uses: actions/github-script@v8
@@ -251,34 +277,55 @@ jobs:
           script: |
             const {verifyReleaseOnNpm} = require('./.github/workflow-scripts/verifyReleaseOnNpm.js');
             const {isLatest} = require('./.github/workflow-scripts/publishTemplate.js');
-            const version = "${{ github.ref_name }}";
+            const version = "${{ needs.determine_mode.outputs.release-tag }}";
             await verifyReleaseOnNpm(version, isLatest());
       - name: Verify that artifacts are on Maven
         uses: actions/github-script@v8
         with:
           script: |
             const {verifyArtifactsAreOnMaven} = require('./.github/workflow-scripts/verifyArtifactsAreOnMaven.js');
-            const version = "${{ github.ref_name }}";
+            const version = "${{ needs.determine_mode.outputs.release-tag }}";
             await verifyArtifactsAreOnMaven(version);
 
   # ─── Release-only: changelog, podfile bump, draft release ────────
   generate_changelog:
     needs: [determine_mode, publish_react_native]
-    if: needs.determine_mode.outputs.mode == 'release'
+    if: |
+      always() &&
+      needs.determine_mode.result == 'success' &&
+      ((needs.determine_mode.outputs.mode == 'release' && needs.publish_react_native.result == 'success') ||
+       needs.determine_mode.outputs.mode == 'post-release')
     uses: ./.github/workflows/generate-changelog.yml
     secrets: inherit
+    with:
+      releaseVersion: ${{ needs.determine_mode.outputs.release-tag }}
+      checkoutRef: ${{ needs.determine_mode.outputs.release-tag }}
 
   bump_podfile_lock:
     needs: [determine_mode, publish_react_native]
-    if: needs.determine_mode.outputs.mode == 'release'
+    if: |
+      always() &&
+      needs.determine_mode.result == 'success' &&
+      ((needs.determine_mode.outputs.mode == 'release' && needs.publish_react_native.result == 'success') ||
+       needs.determine_mode.outputs.mode == 'post-release')
     uses: ./.github/workflows/bump-podfile-lock.yml
     secrets: inherit
+    with:
+      releaseVersion: ${{ needs.determine_mode.outputs.release-tag }}
+      checkoutRef: ${{ needs.determine_mode.outputs.release-tag }}
 
   create_draft_release:
     needs: [determine_mode, generate_changelog, set_hermes_versions]
-    if: needs.determine_mode.outputs.mode == 'release'
+    if: |
+      always() &&
+      needs.determine_mode.result == 'success' &&
+      needs.generate_changelog.result == 'success' &&
+      needs.set_hermes_versions.result == 'success' &&
+      (needs.determine_mode.outputs.mode == 'release' || needs.determine_mode.outputs.mode == 'post-release')
     uses: ./.github/workflows/create-draft-release.yml
     secrets: inherit
     with:
+      releaseVersion: ${{ needs.determine_mode.outputs.release-tag }}
+      checkoutRef: ${{ needs.determine_mode.outputs.release-tag }}
       hermesVersion: ${{ needs.set_hermes_versions.outputs.HERMES_VERSION }}
       hermesV1Version: ${{ needs.set_hermes_versions.outputs.HERMES_V1_VERSION }}
