From 87473c0c04206193b8be71fe48f1673c23fc5746 Mon Sep 17 00:00:00 2001
From: Shazib Summar <shazib@chkk.io>
Date: Mon, 3 Aug 2026 19:00:45 +0500
Subject: [PATCH 1/2] chore: added workflow for changelog file

This commit introduces a github actions workflow to introduce a CHANGELOG.md
file that is automatically updated when a new GitHub release is published in
this repo. The automated-changelog-gh action is added in `prepend` mode i.e.
when triggered through a release publishing it will prepend the CHANGELOG.md
file with the changelog for the latest release. This ensure any manual changes
are reserved but requires us to instantiate a CHANGELOG.md file with the
changelog for previous releases backfilled.

This can be simply done by heading over to the Actions tab in the repo and
running it manually for the first time with mode set to `full`.

The github-actions[bot] will open a PR instead of pushing commit directly to the
default branch.

Resolves https://github.com/temporalio/temporal-worker-controller/issues/296
---
 .github/workflows/update-changelog.yml | 46 ++++++++++++++++++++++++++
 .gitignore                             |  1 +
 2 files changed, 47 insertions(+)
 create mode 100644 .github/workflows/update-changelog.yml

diff --git a/.github/workflows/update-changelog.yml b/.github/workflows/update-changelog.yml
new file mode 100644
index 00000000..fa1fb682
--- /dev/null
+++ b/.github/workflows/update-changelog.yml
@@ -0,0 +1,46 @@
+name: Update Changelog
+
+on:
+  release:
+    types: [published]
+  # Allow manual runs for a specific tag.
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "Tag to generate the changelog entry for"
+        required: false
+        default: ""
+      mode:
+        description:
+          prepend (this tag only) or full (regenerate from all tags).
+          Tag is REQUIRED only if mode is prepend. full mode will
+          regenerate the entire file and WILL DISCARD any manual edits.
+        type: choice
+        options:
+          - prepend
+          - full
+
+permissions:
+  contents: write
+  pull-requests: write # required to open the changelog PR with github-actions[bot]
+
+jobs:
+  changelog:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          # Full history + tags are required to diff between releases.
+          fetch-depth: 0
+          ref: ${{ github.event.repository.default_branch }}
+
+      - name: Update changelog
+        uses: shazib-summar/automated-changelog-gh@v0.2.0
+        with:
+          # see inputs at https://github.com/shazib-summar/automated-changelog-gh#inputs
+          tag: ${{ github.event.inputs.tag }}
+          mode: ${{ github.event.inputs.mode || 'prepend' }}
+          pull-request: true
+          pr-labels: changelog,docs,automated
+          reviewers: jaypipes
diff --git a/.gitignore b/.gitignore
index ecc681da..8a12dc32 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,5 @@
 .idea
+.vscode
 
 bin
 dist

From 58205870f0402edb93b301893ec8f23a57587b3d Mon Sep 17 00:00:00 2001
From: Shazib Summar <shazib@chkk.io>
Date: Mon, 10 Aug 2026 16:42:51 +0500
Subject: [PATCH 2/2] update update-changelog.yml to use pinned SHA action
 reference

Using mutable tags is unsafe and was causing the CI to fail. This commit moves the previous mutable tags such as `actions/checkout@v4` to `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`.
---
 .github/workflows/update-changelog.yml | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/update-changelog.yml b/.github/workflows/update-changelog.yml
index fa1fb682..fb46e0e7 100644
--- a/.github/workflows/update-changelog.yml
+++ b/.github/workflows/update-changelog.yml
@@ -11,8 +11,7 @@ on:
         required: false
         default: ""
       mode:
-        description:
-          prepend (this tag only) or full (regenerate from all tags).
+        description: prepend (this tag only) or full (regenerate from all tags).
           Tag is REQUIRED only if mode is prepend. full mode will
           regenerate the entire file and WILL DISCARD any manual edits.
         type: choice
@@ -29,18 +28,18 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
         with:
           # Full history + tags are required to diff between releases.
           fetch-depth: 0
           ref: ${{ github.event.repository.default_branch }}
 
       - name: Update changelog
-        uses: shazib-summar/automated-changelog-gh@v0.2.0
+        uses: shazib-summar/automated-changelog-gh@05d6ccc344bc518f859e830a72137fb58616fb71 #v0.2.0
         with:
           # see inputs at https://github.com/shazib-summar/automated-changelog-gh#inputs
           tag: ${{ github.event.inputs.tag }}
           mode: ${{ github.event.inputs.mode || 'prepend' }}
           pull-request: true
           pr-labels: changelog,docs,automated
-          reviewers: jaypipes
+          reviewers: temporalio/worker-controller