wilkinsona · Sep 21, 2026
diff --git a/.github/workflows/release-train-build.yml b/.github/workflows/release-train-build.yml
@@ -1,3 +1,6 @@
+# This file was auto-generated by github-actions-workflow-generator 0.0.6. Do not edit.
+# To update it, modify .github/workflow-generator.yml as needed and re-run the generator.
+
 name: "Release Train – Build"
 run-name: "${{ inputs.callback-ref }} – Build"
 "on":
@@ -24,17 +27,22 @@ jobs:
     name: "Build Release"
     runs-on: "ubuntu22-2-8"
     steps:
+    - name: "Prevent Re-runs"
+      id: "prevent-re-runs"
+      run: |-
+        if [ "$GITHUB_RUN_ATTEMPT" -gt 1 ]; then
+          echo "Re-runs are prohibited. Use the 'Release Train – Retry' workflow to retry build failures"
+          exit 1
+        fi
     - name: "Set up Java"
       id: "set-up-java"
-      uses: "actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287" # 5.3.0
+      uses: "actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95" # v5.6.0
       with:
         distribution: "liberica"
         java-version: "17"
     - name: "Check Out Code"
       id: "check-out-code"
-      uses: "actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0" # 7.0.0
-      with:
-        ref: "${{ github.ref }}"
+      uses: "actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0" # v7.0.0
     - name: "Build Release"
       id: "build-release"
       uses: "./.github/actions/release-train-build"
@@ -44,13 +52,21 @@ jobs:
         RELEASE_TRAIN_MAVEN_REPOSITORY_USERNAME: "${{ secrets.RELEASE_TRAIN_PARTICIPANT_MAVEN_REPOSITORY_USERNAME }}"
     - name: "Upload Deployment Repository"
       id: "upload-deployment-repository"
-      uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # 7.0.1
+      uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # v7.0.1
       with:
         name: "deployment-repository"
         path: "deployment-repository/**"
+    - name: "Upload Deployment Spec"
+      id: "upload-deployment-spec"
+      uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # v7.0.1
+      with:
+        archive: "false"
+        if-no-files-found: "ignore"
+        name: "deployment-spec"
+        path: ".github/actions/release-train-build/deployment-spec.yml"
     - name: "Save Build System Caches"
       id: "save-build-system-caches"
-      uses: "actions/cache/save@2c8a9bd7457de244a408f35966fab2fb45fda9c8" # 6.0.0
+      uses: "actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9" # v6.1.0
       with:
         key: "release-train-${{ inputs.callback-ref }}-${{ github.ref_name }}"
         path: "~/.m2/repository"
@@ -59,4 +75,14 @@ jobs:
       if: "${{ !cancelled() }}"
       env:
         GH_TOKEN: "${{ secrets.RELEASE_TRAIN_PARTICIPANT_GITHUB_TOKEN }}"
-      run: "gh workflow run callback --repo ${{ inputs.callback }} --ref ${{ inputs.callback-ref }} --field deployment-repository-artifact-identifier=${{ steps.upload-deployment-repository.outputs.artifact-id }} --field release-branch=${{ github.ref_name }} --field release-repository=${{ github.repository }} --field result=${{ job.status == 'success' && 'built' || 'build-failed' }}"
+      run: |-
+        gh workflow run callback \
+        --repo ${{ inputs.callback }} \
+        --ref ${{ inputs.callback-ref }} \
+        --field commit-hash=${{ steps.check-out-code.outputs.commit }} \
+        --field deployment-repository-artifact-identifier=${{ steps.upload-deployment-repository.outputs.artifact-id }} \
+        --field deployment-spec-artifact-identifier=${{ steps.upload-deployment-spec.outputs.artifact-id }} \
+        --field release-branch=${{ github.ref_name }} \
+        --field release-repository=${{ github.repository }} \
+        --field result=${{ job.status == 'success' && 'built' || 'build-failed' }} \
+        --field workflow-run-url=${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
diff --git a/.github/workflows/release-train-join.yml b/.github/workflows/release-train-join.yml
@@ -1,3 +1,6 @@
+# This file was auto-generated by github-actions-workflow-generator 0.0.6. Do not edit.
+# To update it, modify .github/workflow-generator.yml as needed and re-run the generator.
+
 name: "Release Train – Join"
 run-name: "${{ inputs.release-train }} – Join"
 "on":
@@ -31,7 +34,15 @@ jobs:
       env:
         GH_TOKEN: "${{ secrets.RELEASE_TRAIN_PARTICIPANT_GITHUB_TOKEN }}"
       run: |-
-        run_url=$(gh workflow run join --repo ${{ inputs.release-train-repository }} --ref ${{ inputs.release-train }} --field deployment-destination=${{ inputs.deployment-destination == 'Maven Central' && 'maven-central' || 'spring-enterprise' }} --field release-branch=${{ github.ref_name }} --field release-repository=${{ github.repository }})
+        run_url=$(
+          gh workflow run join \
+          --repo ${{ inputs.release-train-repository }} \
+          --ref ${{ inputs.release-train }} \
+          --field commit-hash=${{ github.sha }} \
+          --field deployment-destination=${{ inputs.deployment-destination == 'Maven Central' && 'maven-central' || 'spring-enterprise' }} \
+          --field release-branch=${{ github.ref_name }} \
+          --field release-repository=${{ github.repository }}
+        )
         echo "Dispatched workflow run. Waiting for $run_url to complete."
         run_id=${run_url##*/}
         watch_exit_code=0

diff --git a/.github/workflows/release-train-leave.yml b/.github/workflows/release-train-leave.yml
@@ -1,3 +1,6 @@
+# This file was auto-generated by github-actions-workflow-generator 0.0.6. Do not edit.
+# To update it, modify .github/workflow-generator.yml as needed and re-run the generator.
+
 name: "Release Train – Leave"
 run-name: "${{ inputs.release-train }} – Leave"
 "on":
@@ -24,7 +27,13 @@ jobs:
       env:
         GH_TOKEN: "${{ secrets.RELEASE_TRAIN_PARTICIPANT_GITHUB_TOKEN }}"
       run: |-
-        run_url=$(gh workflow run leave --repo ${{ inputs.release-train-repository }} --ref ${{ inputs.release-train }} --field release-branch=${{ github.ref_name }} --field release-repository=${{ github.repository }})
+        run_url=$(
+          gh workflow run leave \
+          --repo ${{ inputs.release-train-repository }} \
+          --ref ${{ inputs.release-train }} \
+          --field release-branch=${{ github.ref_name }} \
+          --field release-repository=${{ github.repository }}
+        )
         echo "Dispatched workflow run. Waiting for $run_url to complete."
         run_id=${run_url##*/}
         watch_exit_code=0

diff --git a/.github/workflows/release-train-ready.yml b/.github/workflows/release-train-ready.yml
@@ -1,3 +1,6 @@
+# This file was auto-generated by github-actions-workflow-generator 0.0.6. Do not edit.
+# To update it, modify .github/workflow-generator.yml as needed and re-run the generator.
+
 name: "Release Train – Ready"
 run-name: "${{ inputs.release-train }} – Ready"
 "on":
@@ -24,7 +27,14 @@ jobs:
       env:
         GH_TOKEN: "${{ secrets.RELEASE_TRAIN_PARTICIPANT_GITHUB_TOKEN }}"
       run: |-
-        run_url=$(gh workflow run ready --repo ${{ inputs.release-train-repository }} --ref ${{ inputs.release-train }} --field release-branch=${{ github.ref_name }} --field release-repository=${{ github.repository }})
+        run_url=$(
+          gh workflow run ready \
+          --repo ${{ inputs.release-train-repository }} \
+          --ref ${{ inputs.release-train }} \
+          --field commit-hash=${{ github.sha }} \
+          --field release-branch=${{ github.ref_name }} \
+          --field release-repository=${{ github.repository }}
+        )
         echo "Dispatched workflow run. Waiting for $run_url to complete."
         run_id=${run_url##*/}
         watch_exit_code=0

diff --git a/.github/workflows/release-train-retry.yml b/.github/workflows/release-train-retry.yml
@@ -0,0 +1,34 @@
+# This file was auto-generated by github-actions-workflow-generator 0.0.6. Do not edit.
+# To update it, modify .github/workflow-generator.yml as needed and re-run the generator.
+
+name: "Release Train – Retry"
+run-name: "${{ inputs.release-train }} – Retry"
+"on":
+  workflow_dispatch:
+    inputs:
+      release-train:
+        description: "Release train"
+        required: true
+        type: "string"
+      release-train-repository:
+        default: "spring-io/release-train"
+        description: "Release train repository"
+        required: true
+        type: "string"
+permissions:
+  contents: "none"
+jobs:
+  trigger-retry:
+    name: "Trigger Retry"
+    runs-on: "ubuntu-latest"
+    steps:
+    - name: "Trigger Retry"
+      id: "trigger-retry"
+      env:
+        GH_TOKEN: "${{ secrets.RELEASE_TRAIN_PARTICIPANT_GITHUB_TOKEN }}"
+      run: |-
+        gh workflow run retry \
+        --repo ${{ inputs.release-train-repository }} \
+        --ref ${{ inputs.release-train }} \
+        --field release-branch=${{ github.ref_name }} \
+        --field release-repository=${{ github.repository }}
diff --git a/.github/workflows/release-train-test.yml b/.github/workflows/release-train-test.yml
@@ -1,3 +1,6 @@
+# This file was auto-generated by github-actions-workflow-generator 0.0.6. Do not edit.
+# To update it, modify .github/workflow-generator.yml as needed and re-run the generator.
+
 name: "Release Train – Test"
 run-name: "${{ inputs.callback-ref }} – Test"
 "on":
@@ -24,20 +27,25 @@ jobs:
     name: "Test Release"
     runs-on: "ubuntu22-2-8"
     steps:
+    - name: "Prevent Re-runs"
+      id: "prevent-re-runs"
+      run: |-
+        if [ "$GITHUB_RUN_ATTEMPT" -gt 1 ]; then
+          echo "Re-runs are prohibited. Use the 'Release Train – Retry' workflow to retry test failures"
+          exit 1
+        fi
     - name: "Set up Java"
       id: "set-up-java"
-      uses: "actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287" # 5.3.0
+      uses: "actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95" # v5.6.0
       with:
         distribution: "liberica"
         java-version: "17"
     - name: "Check Out Code"
       id: "check-out-code"
-      uses: "actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0" # 7.0.0
-      with:
-        ref: "${{ github.ref }}"
+      uses: "actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0" # v7.0.0
     - name: "Restore Build System Caches"
       id: "restore-build-system-caches"
-      uses: "actions/cache/restore@2c8a9bd7457de244a408f35966fab2fb45fda9c8" # 6.0.0
+      uses: "actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9" # v6.1.0
       with:
         key: "release-train-${{ inputs.callback-ref }}-${{ github.ref_name }}"
         path: "~/.m2/repository"
@@ -53,11 +61,19 @@ jobs:
       if: "${{ !cancelled() }}"
       env:
         GH_TOKEN: "${{ secrets.RELEASE_TRAIN_PARTICIPANT_GITHUB_TOKEN }}"
-      run: "gh workflow run callback --repo ${{ inputs.callback }} --ref ${{ inputs.callback-ref }} --field release-branch=${{ github.ref_name }} --field release-repository=${{ github.repository }} --field result=${{ job.status == 'success' && 'tested' || 'test-failed' }}"
+      run: |-
+        gh workflow run callback \
+        --repo ${{ inputs.callback }} \
+        --ref ${{ inputs.callback-ref }} \
+        --field commit-hash=${{ steps.check-out-code.outputs.commit }} \
+        --field release-branch=${{ github.ref_name }} \
+        --field release-repository=${{ github.repository }} \
+        --field result=${{ job.status == 'success' && 'tested' || 'test-failed' }} \
+        --field workflow-run-url=${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
     - name: "Upload Build System Reports"
       id: "upload-build-system-reports"
       if: "${{ failure() }}"
-      uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # 7.0.1
+      uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # v7.0.1
       with:
         name: "build-system-reports"
         path: |-