ci: Bump version of modules when new module is released (#4040)

* ci: Bump version of modules when new module is released

Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>

* fix: avoid injection in inputs

Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>

---------

Signed-off-by: Thomas Poignant <thomas.poignant@gofeatureflag.org>

Author: thomaspoignant

.github/workflows/bump-module-dependency.yml

@@ -0,0 +1,58 @@
+# ---------------------------------------
+# Bump module dependency is a workflow that bumps the dependency of a module to the latest version.
+# This is a reusable workflow and is used by the release-please workflow to bump the dependency of the module to the latest version.
+# ---------------------------------------
+name: bump module dependency
+permissions:
+  actions: read
+  contents: read
+
+on:
+  workflow_call:
+    inputs:
+      modulePath: { type: string, required: true }
+      version: { type: string, required: true }
+
+jobs:
+  bump-module:
+    name: Bump module dependency ${{ inputs.modulePath }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+
+      - name: Setup go
+        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
+        with:
+          go-version-file: ${{ inputs.modulePath }}/go.mod
+          check-latest: true
+
+      - name: Update internal module
+        env:
+          VERSION: ${{ inputs.version }}
+          MODULE_PATH: ${{ inputs.modulePath }}
+        run: |
+          export GOWORK=off
+          go get github.com/thomaspoignant/go-feature-flag/${MODULE_PATH}@${VERSION }
+          go mod tidy
+          go mod vendor
+          go mod verify
+
+      - name: Create Pull Request to bump module
+        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
+        env:
+          VERSION: ${{ inputs.version }}
+          MODULE_PATH: ${{ inputs.modulePath }}
+        with:
+          branch: bump-module-${MODULE_PATH}-${VERSION}
+          title: "chore(dependency): Bump module ${MODULE_PATH} ${VERSION}"
+          body: |
+            Automated pull request to bump module  ${MODULE_PATH} ${VERSION}
+          commit-message: "chore(dependency): Bump module  ${MODULE_PATH} ${VERSION}"
+          assignees: thomaspoignant
+          draft: false
+          signoff: true
+          delete-branch: true
+          base: main
+          labels: automerge
+          token: ${{ secrets.PERSONAL_GITHUB_TOKEN }}

.github/workflows/bump-modules.yml

@@ -11,10 +11,32 @@ permissions:
 jobs:
   release-please:
     runs-on: ubuntu-latest
+    outputs:
+      module_evaluation_released: ${{ steps.release.outputs['modules/evaluation--release_created'] }}
+      module_evaluation_version: ${{ steps.release.outputs['modules/evaluation--version'] }}
+      module_core_released: ${{ steps.release.outputs['modules/core--release_created'] }}
+      module_core_version: ${{ steps.release.outputs['modules/core--version'] }}
     steps:
       - uses: googleapis/release-please-action@c2a5a2bd6a758a0937f1ddb1e8950609867ed15c # v4.3.0
+        id: release
         with:
           # See: https://github.com/googleapis/release-please
           token: ${{ secrets.PERSONAL_GITHUB_TOKEN }}
           config-file: .github/release-please/release-please-config.json
           manifest-file: .github/release-please/.release-please-manifest.json
+      
+  bump-module-evaluation:
+    if: ${{ needs.release-please.outputs.module_evaluation_released == 'true' }}
+    uses: ./.github/workflows/bump-modules.yml
+    needs: release-please
+    with:
+      modulePath: module/evaluation
+      version: ${{ needs.release-please.outputs.module_evaluation_version }}
+
+  bump-module-core:
+    if: ${{ needs.release-please.outputs.module_core_released == 'true' }}
+    uses: ./.github/workflows/bump-modules.yml
+    needs: release-please
+    with:
+      modulePath: module/core
+      version: ${{ needs.release-please.outputs.module_core_version }}