feat(ci): add issue-branch.yml [skip ci]

The Python heredoc couldn't access shell-local API variable.
Move it to step-level env so os.environ sees it.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.mokogitea/workflows/issue-branch.yml

@@ -0,0 +1,73 @@
+# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+#
+# SPDX-License-Identifier: GPL-3.0-or-later
+#
+# FILE INFORMATION
+# DEFGROUP: Gitea.Workflow
+# INGROUP: moko-platform.Automation
+# VERSION: 01.00.00
+# BRIEF: Auto-create feature branch when an issue is opened
+
+name: "Universal: Issue Branch"
+
+on:
+  issues:
+    types: [opened]
+
+permissions:
+  contents: write
+  issues: write
+
+env:
+  GITEA_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+
+jobs:
+  create-branch:
+    name: Create feature branch
+    runs-on: ubuntu-latest
+    steps:
+      - name: Create branch and comment
+        run: |
+          TOKEN="${{ secrets.GA_TOKEN }}"
+          API="${GITEA_URL}/api/v1/repos/${{ github.repository }}"
+          ISSUE_NUM="${{ github.event.issue.number }}"
+          ISSUE_TITLE="${{ github.event.issue.title }}"
+
+          # Build slug from title: lowercase, replace non-alnum with dash, trim
+          SLUG=$(echo "${ISSUE_TITLE}" | tr '[:upper:]' '[:lower:]' | sed 's/[^a-z0-9]/-/g' | sed 's/--*/-/g' | sed 's/^-//;s/-$//' | cut -c1-40)
+          BRANCH="feature/${ISSUE_NUM}-${SLUG}"
+
+          # Check dev branch exists
+          DEV_EXISTS=$(curl -sf -o /dev/null -w '%{http_code}' \
+            -H "Authorization: token ${TOKEN}" \
+            "${API}/branches/dev" 2>/dev/null || echo "000")
+
+          if [ "${DEV_EXISTS}" != "200" ]; then
+            echo "No dev branch -- skipping"
+            exit 0
+          fi
+
+          # Create branch from dev
+          HTTP=$(curl -sf -o /dev/null -w '%{http_code}' -X POST \
+            -H "Authorization: token ${TOKEN}" \
+            -H "Content-Type: application/json" \
+            "${API}/branches" \
+            -d "{\"new_branch_name\":\"${BRANCH}\",\"old_branch_name\":\"dev\"}" 2>/dev/null || echo "000")
+
+          if [ "${HTTP}" = "201" ]; then
+            echo "Created branch: ${BRANCH}"
+
+            # Comment on issue with branch link
+            REPO_URL="${GITEA_URL}/${{ github.repository }}"
+            BODY="Branch created: [\`${BRANCH}\`](${REPO_URL}/src/branch/${BRANCH})\n\n\`\`\`bash\ngit fetch origin\ngit checkout ${BRANCH}\n\`\`\`"
+
+            curl -sf -X POST \
+              -H "Authorization: token ${TOKEN}" \
+              -H "Content-Type: application/json" \
+              "${API}/issues/${ISSUE_NUM}/comments" \
+              -d "{\"body\":\"${BODY}\"}" > /dev/null 2>&1
+
+            echo "Commented on issue #${ISSUE_NUM}"
+          else
+            echo "Failed to create branch (HTTP ${HTTP}) -- may already exist"
+          fi

.mokogitea/workflows/pr-rc-release.yml

@@ -2,13 +2,11 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 # BRIEF: Auto-build RC release on PR to main, update RC update stream
 
-name: "PR: RC Release"
+name: "PR RC Release"
 
 on:
   pull_request:
     types: [opened, synchronize]
-    branches:
-      - main
 
 env:
   FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
@@ -23,66 +21,92 @@ jobs:
     name: Build RC Release
     runs-on: ubuntu-latest
     steps:
+      - name: Check target branch
+        id: guard
+        env:
+          BASE_BRANCH: ${{ github.base_ref }}
+        run: |
+          echo "PR target: ${BASE_BRANCH}"
+          if [ "$BASE_BRANCH" != "main" ]; then
+            echo "skip=true" >> "$GITHUB_OUTPUT"
+            echo "Skipping RC — only for PRs targeting main"
+          else
+            echo "skip=false" >> "$GITHUB_OUTPUT"
+          fi
+
       - name: Checkout PR branch
+        if: steps.guard.outputs.skip != 'true'
         uses: actions/checkout@v4
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0
 
       - name: Determine RC version
+        if: steps.guard.outputs.skip != 'true'
         id: version
         env:
           PR_NUMBER: ${{ github.event.pull_request.number }}
         run: |
-          # Read current version from updates.xml
           BASE_VERSION=$(sed -n 's/.*<version>\(.*\)<\/version>.*/\1/p' updates.xml | head -1)
           [ -z "$BASE_VERSION" ] && BASE_VERSION="04.00.00"
-
           RC_VERSION="${BASE_VERSION}-rc.${PR_NUMBER}"
           RC_TAG="v1.26.1-moko.${RC_VERSION}"
           echo "version=$RC_VERSION" >> "$GITHUB_OUTPUT"
           echo "tag=$RC_TAG" >> "$GITHUB_OUTPUT"
-          echo "base=$BASE_VERSION" >> "$GITHUB_OUTPUT"
           echo "RC version: $RC_VERSION (tag: $RC_TAG)"
 
       - name: Update updates.xml RC channel
+        if: steps.guard.outputs.skip != 'true'
         env:
           RC_VERSION: ${{ steps.version.outputs.version }}
           RC_TAG: ${{ steps.version.outputs.tag }}
           PR_URL: ${{ github.event.pull_request.html_url }}
+          PR_NUM: ${{ github.event.pull_request.number }}
         run: |
-          DATE=$(date -u +%Y-%m-%d)
           DOCKER_TAG="${REGISTRY}/${IMAGE}:${RC_TAG}"
 
-          # Build the RC update entry
-          RC_ENTRY=$(cat <<XMLEOF
-  <update>
-    <name>MokoGitea</name>
-    <description>MokoGitea RC from PR #${{ github.event.pull_request.number }}</description>
-    <element>mokogitea</element>
-    <type>application</type>
-    <version>${RC_VERSION}</version>
-    <client>server</client>
-    <tags><tag>rc</tag></tags>
-    <infourl title="MokoGitea RC">${PR_URL}</infourl>
-    <downloads>
-      <downloadurl type="full" format="docker">${DOCKER_TAG}</downloadurl>
-    </downloads>
-    <sha256></sha256>
-    <targetplatform name="mokogitea" version="((1\\.25\\.)|(1\\.26\\.))" />
-    <maintainer>Moko Consulting</maintainer>
-    <maintainerurl>https://mokoconsulting.tech</maintainerurl>
-  </update>
-XMLEOF
+          python3 << 'PYEOF'
+          import os, re
+
+          rc_version = os.environ["RC_VERSION"]
+          rc_tag = os.environ["RC_TAG"]
+          pr_url = os.environ["PR_URL"]
+          pr_num = os.environ["PR_NUM"]
+          docker_tag = os.environ["REGISTRY"] + "/" + os.environ["IMAGE"] + ":" + rc_tag
+
+          entry = f"""  <update>
+            <name>MokoGitea</name>
+            <description>MokoGitea RC from PR #{pr_num}</description>
+            <element>mokogitea</element>
+            <type>application</type>
+            <version>{rc_version}</version>
+            <client>server</client>
+            <tags><tag>rc</tag></tags>
+            <infourl title="MokoGitea RC">{pr_url}</infourl>
+            <downloads>
+              <downloadurl type="full" format="docker">{docker_tag}</downloadurl>
+            </downloads>
+            <sha256></sha256>
+            <targetplatform name="mokogitea" version="((1\\.25\\.)|(1\\.26\\.))" />
+            <maintainer>Moko Consulting</maintainer>
+            <maintainerurl>https://mokoconsulting.tech</maintainerurl>
+          </update>"""
+
+          content = open("updates.xml").read()
+          # Remove existing RC entry
+          content = re.sub(
+              r"\s*<update>[\s\S]*?<tag>rc</tag>[\s\S]*?</update>",
+              "",
+              content,
           )
+          # Insert before </updates>
+          content = content.replace("</updates>", entry + "\n</updates>")
+          open("updates.xml", "w").write(content)
+          print(f"Updated updates.xml with RC entry: {rc_version}")
+          PYEOF
 
-          # Remove existing RC entry and add new one before </updates>
-          sed -i '/<tags><tag>rc<\/tag><\/tags>/,/<\/update>/d' updates.xml
-          sed -i "s|</updates>|${RC_ENTRY}\n</updates>|" updates.xml
-
-          echo "Updated updates.xml with RC entry"
-
-      - name: Create/update RC release
+      - name: Create RC release
+        if: steps.guard.outputs.skip != 'true'
         env:
           GITEA_TOKEN: ${{ secrets.GA_TOKEN }}
           RC_TAG: ${{ steps.version.outputs.tag }}
@@ -90,35 +114,50 @@ XMLEOF
           PR_TITLE: ${{ github.event.pull_request.title }}
           PR_URL: ${{ github.event.pull_request.html_url }}
           PR_NUMBER: ${{ github.event.pull_request.number }}
+          HEAD_SHA: ${{ github.event.pull_request.head.sha }}
+          API_BASE: https://${{ env.REGISTRY }}/api/v1/repos/${{ github.repository }}
         run: |
-          GITEA_URL="https://${{ env.REGISTRY }}"
-          REPO="${{ github.repository }}"
-          API="${GITEA_URL}/api/v1/repos/${REPO}"
+          # Delete existing RC release/tag if present
+          curl -s -X DELETE -H "Authorization: token ${GITEA_TOKEN}" \
+            "${API_BASE}/releases/tags/${RC_TAG}" 2>/dev/null || true
+          curl -s -X DELETE -H "Authorization: token ${GITEA_TOKEN}" \
+            "${API_BASE}/tags/${RC_TAG}" 2>/dev/null || true
 
-          # Delete existing RC release if present
-          curl -sf -X DELETE \
-            -H "Authorization: token ${GITEA_TOKEN}" \
-            "${API}/releases/tags/${RC_TAG}" 2>/dev/null || true
+          # Create prerelease
+          python3 << PYEOF
+          import json, os, urllib.request
 
-          # Delete existing tag
-          curl -sf -X DELETE \
-            -H "Authorization: token ${GITEA_TOKEN}" \
-            "${API}/tags/${RC_TAG}" 2>/dev/null || true
+          api = os.environ["API_BASE"]
+          token = os.environ["GITEA_TOKEN"]
+          payload = json.dumps({
+              "tag_name": os.environ["RC_TAG"],
+              "target_commitish": os.environ["HEAD_SHA"],
+              "name": f"RC: {os.environ['PR_TITLE']}",
+              "body": f"Release candidate from PR #{os.environ['PR_NUMBER']}\n\nPR: {os.environ['PR_URL']}\nDocker: docker pull {os.environ['REGISTRY']}/{os.environ['IMAGE']}:{os.environ['RC_TAG']}",
+              "draft": False,
+              "prerelease": True,
+          }).encode()
 
-          # Create release
-          BODY="Release candidate from PR #${PR_NUMBER}: ${PR_TITLE}\n\nPR: ${PR_URL}\nDocker: \`docker pull ${REGISTRY}/${IMAGE}:${RC_TAG}\`"
-          curl -sf -X POST \
-            -H "Authorization: token ${GITEA_TOKEN}" \
-            -H "Content-Type: application/json" \
-            "${API}/releases" \
-            -d "{\"tag_name\":\"${RC_TAG}\",\"target_commitish\":\"${{ github.event.pull_request.head.sha }}\",\"name\":\"RC: ${PR_TITLE}\",\"body\":\"${BODY}\",\"draft\":false,\"prerelease\":true}" \
-            > /dev/null
+          req = urllib.request.Request(
+              f"{api}/releases",
+              data=payload,
+              headers={
+                  "Authorization": f"token {token}",
+                  "Content-Type": "application/json",
+              },
+              method="POST",
+          )
+          with urllib.request.urlopen(req) as resp:
+              result = json.loads(resp.read())
+              print(f"Created RC release: {result.get('tag_name')}")
+          PYEOF
 
-          echo "Created RC release: ${RC_TAG}"
-
-      - name: Commit updates.xml change
+      - name: Commit updates.xml
+        if: steps.guard.outputs.skip != 'true'
         env:
           GITEA_TOKEN: ${{ secrets.GA_TOKEN }}
+          HEAD_REF: ${{ github.event.pull_request.head.ref }}
+          PR_NUM: ${{ github.event.pull_request.number }}
         run: |
           git config user.name "MokoGitea Bot"
           git config user.email "deploy@mokoconsulting.tech"
@@ -126,7 +165,6 @@ XMLEOF
           if git diff --cached --quiet; then
             echo "No changes to updates.xml"
           else
-            git commit -m "chore(ci): update RC stream for PR #${{ github.event.pull_request.number }}"
-            git push origin HEAD:${{ github.event.pull_request.head.ref }}
+            git commit -m "chore(ci): update RC stream for PR #${PR_NUM}"
+            git push origin "HEAD:${HEAD_REF}" || echo "Push failed"
           fi
-

CHANGELOG.md

@@ -5852,3 +5852,4 @@ Key highlights of this release encompass significant changes categorized under `
 ## Archived releases
 
 * [CHANGELOG-archived.md](CHANGELOG-archived.md)
+# PR RC Workflow Test

updates.xml

@@ -56,4 +56,21 @@
     <maintainer>Moko Consulting</maintainer>
     <maintainerurl>https://mokoconsulting.tech</maintainerurl>
   </update>
+  <update>
+  <name>MokoGitea</name>
+  <description>MokoGitea RC from PR #170</description>
+  <element>mokogitea</element>
+  <type>application</type>
+  <version>04.01.00-rc.170</version>
+  <client>server</client>
+  <tags><tag>rc</tag></tags>
+  <infourl title="MokoGitea RC">https://git.mokoconsulting.tech/MokoConsulting/MokoGitea/pulls/170</infourl>
+  <downloads>
+    <downloadurl type="full" format="docker">git.mokoconsulting.tech/mokoconsulting/mokogitea:v1.26.1-moko.04.01.00-rc.170</downloadurl>
+  </downloads>
+  <sha256></sha256>
+  <targetplatform name="mokogitea" version="((1\.25\.)|(1\.26\.))" />
+  <maintainer>Moko Consulting</maintainer>
+  <maintainerurl>https://mokoconsulting.tech</maintainerurl>
+</update>
 </updates>