Merge pull request #220 from scylladb/ci/release-blocker-gate

ci: block releases with open release blockers

Author: dkropachev

.github/workflows/release.yml

@@ -31,6 +31,27 @@ jobs:
       MVNCMD: mvn -B -X -ntp
 
     steps:
+      - name: Check for open release blockers
+        if: inputs.dry-run == false
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set -euo pipefail
+          blocker="$(
+            gh issue list \
+              --repo "$GITHUB_REPOSITORY" \
+              --state open \
+              --label release-blocker \
+              --limit 1 \
+              --json title,url \
+              --jq '.[0] | select(.) | "\(.url) — \(.title)"'
+          )"
+          if [[ -n "$blocker" ]]; then
+            echo "::error::Release blocked by open issue: $blocker"
+            exit 1
+          fi
+          echo "No open release blockers."
+
       - name: Checkout Repository
         uses: actions/checkout@v7
 
@@ -72,6 +93,27 @@ jobs:
           export MAVEN_OPTS
           $MVNCMD release:prepare -DpushChanges=false -Dgpg.passphrase=${{ secrets.GPG_PASSPHRASE }}
 
+      - name: Recheck for open release blockers
+        if: inputs.dry-run == false
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set -euo pipefail
+          blocker="$(
+            gh issue list \
+              --repo "$GITHUB_REPOSITORY" \
+              --state open \
+              --label release-blocker \
+              --limit 1 \
+              --json title,url \
+              --jq '.[0] | select(.) | "\(.url) — \(.title)"'
+          )"
+          if [[ -n "$blocker" ]]; then
+            echo "::error::Release blocked by open issue: $blocker"
+            exit 1
+          fi
+          echo "No open release blockers."
+
       - name: Perform release
         env:
           GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}