Distillation

Date: Aug 25, 2026

• 🟡 (15:24) Inspected /home/byk/Code/getsentry/craft-workspace-action-propagation/.github/workflows/release.yml:1-151: Release workflow has concurrency ${{ github.workflow }}-${{ github.ref }} and supports both workflow_dispatch and workflow_call.
• 🟡 (15:24) workflow_dispatch inputs include required version (default 'auto'), optional force, and optional workspace described as “Named Craft release workspace to prepare and publish.”
• 🟡 (15:24) workflow_call inputs include version, force (default 'false'), merge_target, blocker_label (default 'release-blocker'), publish_repo, git_user_name, git_user_email, path (default '.'), workspace, and craft_config_from_merge_target (default 'false'); all are type: string and non-required.
• 🟡 (15:24) workflow_call outputs version, branch, sha, previous_tag, and changelog are sourced from jobs.release.outputs.
• 🟡 (15:24) The build job runs only when github.repository == 'getsentry/craft', uses ./.github/workflows/build.yml, and has contents: read permission.
• 🟡 (15:24) The release job needs build, runs when the build succeeded or was skipped via always() && (needs.build.result == 'success' || needs.build.result == 'skipped'), uses ubuntu-latest, and has contents: write permission.
• 🟡 (15:24) release job outputs select each value from steps.craft-local.outputs or fallback steps.craft-action.outputs: version, branch, sha, previous_tag, and changelog.
• 🟡 (15:24) For Craft dogfooding releases, the workflow conditionally creates a release-bot token with actions/create-github-app-token@v3, using ${{ vars.SENTRY_RELEASE_BOT_CLIENT_ID }} and ${{ secrets.SENTRY_RELEASE_BOT_PRIVATE_KEY }}; checkout uses ${{ steps.token.outputs.token || github.token }} with fetch-depth: 0.
• 🟡 (15:24) The dogfooding step Prepare release (dogfooding) runs only for getsentry/craft, uses local action ./, sets GITHUB_TOKEN: ${{ steps.token.outputs.token }}, and passes version, force, and newly wired workspace: ${{ github.event.inputs.workspace }}.
• 🟡 (15:24) The external-repository step Prepare release runs when repository is not getsentry/craft, uses getsentry/craft@v2, sets GITHUB_TOKEN: ${{ github.token }}, and passes version, force, merge_target, blocker_label, publish_repo, git_user_name, git_user_email, path, newly wired workspace: ${{ inputs.workspace }}, and craft_config_from_merge_target.