Summary

• Adds automatic workflow dispatch to temporalio/cloud-ui when changes are pushed to main
• Uses GitHub App authentication for secure cross-repo access
• Enables automatic dependency update PRs in downstream repositories

Details

This PR adds a new GitHub Actions workflow that automatically triggers the generate-ui-pr workflow in the temporalio/cloud-ui repository whenever changes are pushed to the main branch.

Key features:

• GitHub App authentication: Uses TEMPORAL_CICD_APP_ID and TEMPORAL_CICD_PRIVATE_KEY for secure cross-repo access
• Flexible triggering: Can be triggered automatically on push or manually via workflow_dispatch
• SHA tracking: Passes the exact SHA to the downstream workflow for traceability
• Mode support: Includes "release" mode for the downstream workflow
• Commit comments: Adds comments to commits for visibility (on push events)
• Logging: Provides clear success/failure feedback

Configuration

The workflow requires the following secrets to be configured in the repository:

• TEMPORAL_CICD_APP_ID: GitHub App ID with access to both repositories
• TEMPORAL_CICD_PRIVATE_KEY: Private key for the GitHub App

Testing

This same workflow configuration has been successfully tested and deployed in:

• temporalio/frontend-workflow-runner → temporalio/frontend-shared-workflows

Test plan

• Verify the workflow file syntax is valid
• Confirm required secrets are configured
• After merge, verify workflow triggers on push to main
• Verify downstream workflow is successfully dispatched in cloud-ui