*: patch release gh actions

[DiogoSantoss]

Introduces bump-patch-version.yml, tag-patch-release-candidate.yml, prepare-patch-full-release.yml, and tag-patch-full-release.yml GH actions, and adds authorization to tag-minor-full-release.yml.

bump-patch-version.yml finds the latest release branch (e.g., main-vX.Y), determines the next patch version by finding existing patch releases, and creates a PR to update the release branch version to vX.Y-rc.

tag-patch-release-candidate.yml creates and pushes incremental release candidate tags (e.g., vX.Y.Z-rc1, vX.Y.Z-rc2) for testing, and can auto-detect the latest release branch.

prepare-patch-full-release.yml finds the latest release branch, validates that the version file contains vX.Y-rc, and creates a PR to update the release branch version from vX.Y-rc to vX.Y.

tag-patch-full-release.yml validates that the stable version PR has been merged, creates and pushes the tag vX.Y.Z, and is restricted to authorized users.

tag-minor-full-release.yml adds authorization check restricting workflow to authorized users only.

Workflow:

1. Run bump-patch-version.yml to create the RC version PR
2. Merge the PR
3. Run tag-patch-release-candidate.yml to create RC tags for testing
4. Run prepare-patch-full-release.yml to create the stable version PR
5. Merge the stable version PR
6. Run tag-patch-full-release.yml to create and push the release tag

category: misc
ticket: #3933

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 56.40%. Comparing base (2d75cea) to head (d3c707c).
⚠️ Report is 9 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4125      +/-   ##
==========================================
+ Coverage   56.35%   56.40%   +0.05%     
==========================================
  Files         245      245              
  Lines       31169    31175       +6     
==========================================
+ Hits        17566    17585      +19     
+ Misses      11288    11280       -8     
+ Partials     2315     2310       -5     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

Pull request overview

This PR introduces a comprehensive set of GitHub Actions workflows to automate the patch release process for the project. The workflows follow a structured release pipeline similar to the existing minor release workflows, enabling incremental patch releases with release candidate testing phases.

• Adds four new workflows for managing patch releases from version bumping through final tagging
• Updates the existing minor full release workflow to add authorization controls
• Implements auto-detection of the latest release branch across all workflows

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
.github/workflows/bump-patch-version.yml	Creates PRs to update release branch versions to RC format (vX.Y-rc) when starting a new patch release
.github/workflows/tag-patch-release-candidate.yml	Creates and pushes incremental RC tags (vX.Y.Z-rc1, vX.Y.Z-rc2, etc.) for testing; has a syntax error on line 41
.github/workflows/prepare-patch-full-release.yml	Creates PRs to update version from RC to stable format before final release tagging
.github/workflows/tag-patch-full-release.yml	Creates and pushes final release tags (vX.Y.Z) with authorization checks
.github/workflows/tag-minor-full-release.yml	Adds authorization check and removes manual release branch input parameter

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review for a chance to win a $100 gift card. Take the survey.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud