From 381c556f7885e67e645fcd9991af8f12fc427337 Mon Sep 17 00:00:00 2001
From: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
Date: Thu, 20 Aug 2026 16:57:48 -0600
Subject: [PATCH] Add Release Announcement Workflows

Closes gh-19571

Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
---
 .../release-announcements-publish.yml         | 30 +++++++++++++++++++
 .../workflows/release-announcements-stage.yml | 24 +++++++++++++++
 2 files changed, 54 insertions(+)
 create mode 100644 .github/workflows/release-announcements-publish.yml
 create mode 100644 .github/workflows/release-announcements-stage.yml

diff --git a/.github/workflows/release-announcements-publish.yml b/.github/workflows/release-announcements-publish.yml
new file mode 100644
index 0000000000..449db9269d
--- /dev/null
+++ b/.github/workflows/release-announcements-publish.yml
@@ -0,0 +1,30 @@
+name: Release Announcements - Publish
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: The version to publish
+        required: true
+        type: string
+
+permissions:
+  actions: write
+  contents: read
+  issues: write
+
+jobs:
+  deploy-schema:
+    name: Deploy Schema
+    uses: spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml@d6c65d3013c0888e2c9cbae9f4beda610994776c # v1.0.16
+    with:
+      should-deploy-schema: true
+    secrets: inherit
+  publish-release-announcements:
+    name: Publish Release Announcements
+    needs: [ deploy-schema ]
+    if: ${{ !github.event.repository.fork }}
+    uses: spring-io/spring-security-release-tools/.github/workflows/release-announcements-publish.yml@d6c65d3013c0888e2c9cbae9f4beda610994776c # v1.0.16
+    with:
+      version: ${{ inputs.version }}
+    secrets: inherit
diff --git a/.github/workflows/release-announcements-stage.yml b/.github/workflows/release-announcements-stage.yml
new file mode 100644
index 0000000000..fd1c6da47d
--- /dev/null
+++ b/.github/workflows/release-announcements-stage.yml
@@ -0,0 +1,24 @@
+name: Release Announcements - Stage
+
+on:
+  push:
+    tags:
+      - '[0-9]+.[0-9]+.[0-9]+'
+  workflow_dispatch:
+    inputs:
+      version:
+        description: The version to stage
+        required: true
+        type: string
+
+permissions:
+  contents: read
+
+jobs:
+  stage-release-announcements:
+    name: Stage Release Announcements
+    if: ${{ !github.event.repository.fork }}
+    uses: spring-io/spring-security-release-tools/.github/workflows/release-announcements-stage.yml@d6c65d3013c0888e2c9cbae9f4beda610994776c # v1.0.16
+    with:
+      version: ${{ inputs.version || github.ref_name }}
+    secrets: inherit