When security releases are completed, tags from other repos need to be sync'd
Recently, with release 14.9.2, the tags associated with GitLab Pages, which had a security update, were not sync'd. This created a situation where the release was made public, but the missing tag for GitLab Pages created an issue for source installations. Since release-tools does not actively reach out to other repos to force sync tags, this creates a problem. For this particular release, this was fixed manually, multiple hours after the release was already completed for the public, though our procedure does not have a step to bring alignment for all of our repositories automatically. While we have a step to bring alignment to our repos, there's no clear guidance on how to perform this if the repo mirroring is stuck or paused. Release-tools should be able to perform this action for us, without needing to wait on maintainers.
14.9.2 was a special case because we did have a conflict which resulted in us being a little sluggish to complete all of our release procedures. This issue is to address repo mirroring when NO conflicts exist.
Utilize this issue to improve our procedure. I'm not yet sure how best to approach this, so consider the following:
- The publish step should contain the ability to forcibly sync tags across repos and alert for conflicts
- The publish step should provide documentation for performing this manually if required
Related issue: gitlab-org/gitlab-pages#724 (closed)