Add releases for main & maintenance branches (#13829)

* Add releases for main & maintenance branches

Before this patch, release.yml workflow was only compiling and
publishing builds on tag pushes.

This patch additionally handles branch pushes (main, v1.17, etc) and
publishes them to corresponding releases (main-latest, v1.17-latest,
etc).

When we first looked at using GitHub releases for main builds, we
discarded the idea because we didn't want to keep re-creating (and thus
sending out notifications) releases. There was no API to update the SHA
the release was pointing too either. It's obvious in hindsight but all
we need to do is to update the _tag_ with the latest SHA and force-push
the tag that the release is pointing to.

We now have two places where we build main and maintenance branches,
release.yml and builds.hex.pm.yml, so in future commits we should look
into unifying the two.

* Update .github/workflows/release.yml

Author: wojtekmach

.github/workflows/release.yml

@@ -2,6 +2,9 @@ name: Release
 
 on:
   push:
+    branches:
+      - main
+      - v*.*
     tags:
       - v*
 
@@ -22,13 +25,33 @@ jobs:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - name: Create draft release
+        if: github.ref_type != 'branch'
         run: |
           gh release create \
             --repo ${{ github.repository }} \
             --title ${{ github.ref_name }} \
             --notes '' \
             --draft \
             ${{ github.ref_name }}
+
+      - uses: actions/checkout@v4
+        if: github.ref_type == 'branch'
+        with:
+          fetch-depth: 50
+
+      - name: Update ${{ github.ref_name }}-latest
+        if: github.ref_type == 'branch'
+        run: |
+          ref_name=${{ github.ref_name }}-latest
+          git tag $ref_name --force
+          git push origin $ref_name --force
+          gh release create \
+            $ref_name \
+            —-latest=false \
+            --title $ref_name \
+            --notes "Automated release for latest ${{ github.ref_name }}." \
+            || true
+
   release_pre_built:
     needs: create_draft_release
     strategy:
@@ -65,6 +88,7 @@ jobs:
           subject-path: 'Docs.*'
 
       - name: "Sign files with Trusted Signing"
+        if: github.repository == 'elixir-lang/elixir'
         uses: azure/[email protected]
         with:
           azure-tenant-id: ${{ secrets.AZURE_TENANT_ID }}
@@ -83,16 +107,20 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          gh release upload --clobber "${{ github.ref_name }}" \
+          if [ "${{ github.ref_type }}" == "branch" ]; then
+            tag=${{ github.ref_name }}-latest
+          else
+            tag="${{ github.ref_name }}"
+          fi
+
+          gh release upload --clobber "$tag" \
             elixir-otp-${{ matrix.otp }}.zip \
             elixir-otp-${{ matrix.otp }}.zip.sha{1,256}sum \
             elixir-otp-${{ matrix.otp }}.exe \
             elixir-otp-${{ matrix.otp }}.exe.sha{1,256}sum
-      - name: Upload Docs to GitHub
-        if: ${{ matrix.build_docs }}
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          gh release upload --clobber "${{ github.ref_name }}" \
-            Docs.zip \
-            Docs.zip.sha{1,256}sum
+
+          if [ "${{ matrix.build_docs }}" == "build_docs" ]; then
+            gh release upload --clobber "$tag" \
+              Docs.zip \
+              Docs.zip.sha{1,256}sum
+          fi