From c165e07f4599e0c8bcdc3a3282a70cf410bfe33b Mon Sep 17 00:00:00 2001
From: Andoni Duarte Pintado <andoni@isc.org>
Date: Thu, 27 Nov 2025 12:45:30 +0100
Subject: [PATCH] Add a tag pipeline CI job to update the stable tag after a
 release

Introduce a CI job to update the "stable" tag with the latest released
stable version tag. This is a manual job that only runs in tag
pipelines in the context of a release.

(cherry picked from commit 2bca6c0d5eacab61843e43021283f37ea959232c)
---
 .gitlab-ci.yml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 89ca4415e8..f3528827c9 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1986,6 +1986,19 @@ merge-tag:
       - bind9/
     when: on_failure
 
+update-stable-tag:
+  <<: *manual_release_job_qa
+  variables:
+    GIT_DEPTH: 1
+  script:
+    - bind9-qa/releng/update_stable_tag.py --tag "$CI_COMMIT_TAG"
+  rules:
+    - *rule_tag_open_source
+  artifacts:
+    paths:
+      - bind9/
+    when: on_failure
+
 .customer-git: &customer_git
   <<: *base_image
   stage: release