chore(release): backport release automation to 1.48 - #709
Conversation
* fix: secure release bump auto-merge * fix: correct release STS workflow claim * fix: automate secure release bump merge * fix: satisfy release automation shellcheck * fix: harden release automation logging * fix: gate release bump merges on approval and CI * test: silence intentional shellcheck literals * test: avoid shellcheck suppressions * fix: parse paginated GitHub API responses * fix: support initial patch releases * test: fix release automation shellcheck * chore: remove added copyright headers
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: f3b3948266
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| --source-sha "$SOURCE_SHA" \ | ||
| --expected-head-sha "$BUMP_HEAD_SHA" | ||
| fi | ||
| git push --atomic --tags |
There was a problem hiding this comment.
When the exact-SHA approval or release-bump-ci subsequently fails or times out, this push has already published the release tag and triggered artifact publication; the wait occurs later in release-validated.yml. The workflow therefore reports failure while leaving an already-tagged version whose normal release cannot be retried and whose bump PR may remain unmerged. Publish the tag only after the gated merge succeeds, or otherwise defer the publication trigger until then.
Useful? React with 👍 / 👎.
| @@ -0,0 +1,509 @@ | |||
| #!/usr/bin/env bash | |||
There was a problem hiding this comment.
This new script has no Datadog copyright header, and the same omission affects the other newly added or modified .github scripts, workflows, Chainguard policies, and dependabot.yml; repository guidance requires adding one whenever a touched file lacks it. Add current-year headers to every affected file before merging.
AGENTS.md reference: AGENTS.md:L372-L374
Useful? React with 👍 / 👎.
CI Test ResultsRun: #30816038231 | Commit:
Status Overview
Legend: ✅ passed | ❌ failed | ⚪ skipped | 🚫 cancelled Summary: Total: 32 | Passed: 32 | Failed: 0 Updated: 2026-08-03 13:18:04 UTC |
Benchmark Results (commit f3b3948)Pipeline: https://gitlab.ddbuild.io/DataDog/apm-reliability/benchmarking-platform/-/pipelines/128552057 Commit:
|
| Benchmark | JDK | Latest | Dev | Δ (dev vs latest) | Issues L/D |
|---|---|---|---|---|---|
| akka-uct | 21 | ✅ 10367 ms (21 iters) | ✅ 10365 ms (21 iters) | ≈ -0% (±11.5%) | — / — |
| akka-uct | 25 | ✅ 8848 ms (24 iters) | ✅ 8908 ms (24 iters) | ≈ +0.7% (±10%) | — / — |
| finagle-chirper | 21 | ✅ 5977 ms (33 iters) | ✅ 5933 ms (33 iters) | ≈ -0.7% (±24.5%) | |
| finagle-chirper | 25 | ✅ 5454 ms (36 iters) | ✅ 5389 ms (36 iters) | ≈ -1.2% (±24.3%) | |
| fj-kmeans | 21 | ✅ 2718 ms (69 iters) | ✅ 2664 ms (69 iters) | ≈ -2% (±2.6%) | — / — |
| fj-kmeans | 25 | ✅ 2834 ms (66 iters) | ✅ 2789 ms (67 iters) | ≈ -1.6% (±2.7%) | — / — |
| future-genetic | 21 | ✅ 2080 ms (89 iters) | ✅ 2169 ms (86 iters) | 🔴 +4.3% | — / — |
| future-genetic | 25 | ✅ 2099 ms (88 iters) | ✅ 2148 ms (87 iters) | ≈ +2.3% (±2.6%) | — / — |
| naive-bayes | 21 | ✅ 1275 ms (134 iters) | ✅ 1263 ms (135 iters) | ≈ -0.9% (±32.6%) | — / — |
| naive-bayes | 25 | ✅ 1010 ms (169 iters) | ✅ 1024 ms (168 iters) | ≈ +1.4% (±32%) | — / — |
| reactors | 21 | ✅ 16816 ms (15 iters) | ✅ 16309 ms (15 iters) | ≈ -3% (±7.7%) | — / — |
Internal counter details (ddprof)
ddprof internal counters, latest / dev (✅ = 0, · = unavailable):
| Benchmark | JDK | Dropped rec | Dropped jvmti | Dropped trace | Skipped WC | AGCT fail | Unwind fail |
|---|---|---|---|---|---|---|---|
| akka-uct | 21 | ✅ / ✅ | ✅ / ✅ | 3 / 4 | 2009 / 1950 | ✅ / ✅ | ✅ / ✅ |
| akka-uct | 25 | ✅ / ✅ | ✅ / ✅ | 2 / 2 | 2188 / 2289 | ✅ / ✅ | ✅ / ✅ |
| finagle-chirper | 21 | ✅ / ✅ | ✅ / ✅ | 2 / 1 | 8532 / 8379 | ✅ / ✅ | ✅ / ✅ |
| finagle-chirper | 25 | ✅ / ✅ | ✅ / ✅ | 3 / 4 | 8490 / 8209 | ✅ / ✅ | ✅ / ✅ |
| fj-kmeans | 21 | ✅ / ✅ | ✅ / ✅ | 5 / ✅ | 1254 / 1231 | ✅ / ✅ | ✅ / ✅ |
| fj-kmeans | 25 | ✅ / ✅ | ✅ / ✅ | 2 / 1 | 1293 / 1266 | ✅ / ✅ | ✅ / ✅ |
| future-genetic | 21 | ✅ / ✅ | ✅ / ✅ | 1 / 3 | 2960 / 2944 | ✅ / ✅ | ✅ / ✅ |
| future-genetic | 25 | ✅ / ✅ | ✅ / ✅ | 5 / 1 | 2864 / 2909 | ✅ / ✅ | ✅ / ✅ |
| naive-bayes | 21 | ✅ / ✅ | ✅ / ✅ | 3 / 7 | 3480 / 3478 | ✅ / ✅ | ✅ / ✅ |
| naive-bayes | 25 | ✅ / ✅ | ✅ / ✅ | 2 / 6 | 3460 / 3494 | ✅ / ✅ | ✅ / ✅ |
| reactors | 21 | ✅ / ✅ | ✅ / ✅ | 1 / ✅ | 1653 / 1734 | ✅ / ✅ | ✅ / ✅ |
| reactors | 25 | ✅ / ✅ | ✅ / ✅ | ✅ / 1 | 1838 / 1845 | ✅ / ✅ | ✅ / ✅ |
![dd-octo-sts[bot]](https://avatars.githubusercontent.com/in/1157446?s=60&v=4){kind=small}
1 participant
Backports the finalized release automation changes from #698 so the first 1.48 patch release can advance from v_1.48.0 to v_1.48.1 and complete its validated version-bump PR.
Validated with all 74 hermetic release-automation test groups and spotlessApply.