chore: automate hotfix procedure (#6547)

* chore: automate hotfix procedure

* fix hotfix branch name

* fix hotfix merge back workflow

Author: ashwinkumar6

.github/workflows/create-hotfix.yml

@@ -0,0 +1,25 @@
+name: Create a hotfix branch
+
+on:
+  workflow_dispatch # manually triggered workflow on Actions
+
+permissions:
+  contents: write # Used to push hotfix branch
+
+jobs:
+  setup:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@b80ff79f1755d06ba70441c368a6fe801f5f3a62 # v4.1.3 https://github.com/actions/checkout/commit/cd7d8d697e10461458bc61a30d094dc601a8b017
+        with:
+          # This makes Actions fetch all Git history so that Changesets can generate changelogs with the correct commits
+          fetch-depth: 0
+
+      - name: Create hotfix branch
+        env:
+          HOTFIX_BRANCH: hotfix
+        run: |
+          # create hotfix branch from commit hash of the latest 'Version Packages'
+          git checkout -b $HOTFIX_BRANCH $(git log origin/main -1 --grep='^Version Packages' --author='github-actions\[bot\]' --pretty=format:"%H")
+          git push origin $HOTFIX_BRANCH

.github/workflows/publish-hotfix.yml

@@ -97,11 +97,40 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
 
+  create-pr-to-main:
+    needs: setup
+    if: ${{ needs.setup.outputs.has-changesets != 'true' }}
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      BASE_BRANCH: "main"
+      HEAD_BRANCH: "hotfix"
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@b80ff79f1755d06ba70441c368a6fe801f5f3a62 # v4.1.3 https://github.com/actions/checkout/commit/cd7d8d697e10461458bc61a30d094dc601a8b017
+      # Check if hotfix -> main PR already exists
+      - name: Check for existing PR
+        id: check-pr
+        run: |
+          PR_EXISTS=$(gh pr list --base $BASE_BRANCH --head $HEAD_BRANCH --json number --jq 'length > 0')
+          echo "exists=$PR_EXISTS" >> $GITHUB_OUTPUT
+      # Create a new PR if one doesn't exist
+      - name: Create PR to main
+        if: steps.check-pr.outputs.exists == 'false'
+        run: |
+          gh pr create \
+            --base $BASE_BRANCH \
+            --head $HEAD_BRANCH \
+            --title "chore: Merge hotfix into main" \
+            --body "Merge the recently completed hotfix back into the main development branch. Generated by the publish-hotfix workflow."
+
   log-failure-metric:
     # Send a failure data point to metric PublishLatestFailure in github-workflows@ us-east-2
     runs-on: ubuntu-latest
     environment: ci
-    needs: publish
+    needs: create-pr-to-main
     if: ${{ failure() }}
     steps:
       - name: Log failure data point to metric PublishLatestFailure
@@ -116,7 +145,7 @@ jobs:
     # Send a success data point to metric PublishLatestFailure in github-workflows@ us-east-2
     runs-on: ubuntu-latest
     environment: ci
-    needs: publish
+    needs: create-pr-to-main
     if: ${{ success() }}
     steps:
       - name: Log success data point to metric PublishLatestFailure

.github/workflows/version-packages.yml

@@ -7,7 +7,7 @@ name: Version Packages
 
 on:
   push:
-    branches: [main]
+    branches: [main, hotfix]
 
 permissions:
   contents: write # Used to commit to "Version Packages" PR
@@ -42,5 +42,9 @@ jobs:
         uses: changesets/action@b98cec97583b917ff1dc6179dd4d230d3e439894
         with:
           version: yarn bumpVersions
+          # Use the current branch as the base for the PR
+          base: ${{ github.ref_name }}
+          # Custom title based on branch
+          title: 'Version Packages (${{ github.ref_name }})'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}