From 8a89a1c86254336e8e14bd10e7013b4b9a750e8f Mon Sep 17 00:00:00 2001
From: Vault Automation <github-team-secure-vault-core@hashicorp.com>
Date: Fri, 22 Aug 2025 11:16:52 -0600
Subject: [PATCH] Upgrade to CRT schema 2 to fix crt-report-dispatch event
 (#8572) (#8809)

Co-authored-by: james-warren0 <95658341+james-warren0@users.noreply.github.com>
---
 .release/ci.hcl | 81 ++++---------------------------------------------
 1 file changed, 6 insertions(+), 75 deletions(-)

diff --git a/.release/ci.hcl b/.release/ci.hcl
index 69ddf9e4a7..0b7a584a9a 100644
--- a/.release/ci.hcl
+++ b/.release/ci.hcl
@@ -1,7 +1,7 @@
 # Copyright (c) HashiCorp, Inc.
 # SPDX-License-Identifier: BUSL-1.1
 
-schema = "1"
+schema = "2"
 
 project "vault" {
   team = "vault"
@@ -81,19 +81,6 @@ event "promote-staging" {
   }
 }
 
-event "promote-staging-docker" {
-  depends = ["promote-staging"]
-  action "promote-staging-docker" {
-    organization = "hashicorp"
-    repository = "crt-workflows-common"
-    workflow = "promote-staging-docker"
-  }
-
-  notification {
-    on = "always"
-  }
-}
-
 event "trigger-production" {
 // This event is dispatched by the bob trigger-promotion command
 // and is required - do not delete.
@@ -107,17 +94,10 @@ event "promote-production" {
     workflow = "promote-production"
   }
 
-  notification {
-    on = "always"
-  }
-}
-
-event "promote-production-docker" {
-  depends = ["promote-production"]
-  action "promote-production-docker" {
-    organization = "hashicorp"
-    repository = "crt-workflows-common"
-    workflow = "promote-production-docker"
+  promotion-events {
+    update-ironbank = true
+    bump-version-patch = true
+    post-publish-website = true
   }
 
   notification {
@@ -125,56 +105,6 @@ event "promote-production-docker" {
   }
 }
 
-event "promote-production-packaging" {
-  depends = ["promote-production-docker"]
-  action "promote-production-packaging" {
-    organization = "hashicorp"
-    repository = "crt-workflows-common"
-    workflow = "promote-production-packaging"
-  }
-
-  notification {
-    on = "always"
-  }
-}
-
-# The post-publish-website event should not be merged into the enterprise repo.
-# It is for OSS use only.
-event "post-publish-website" {
-  depends = ["promote-production-packaging"]
-  action "post-publish-website" {
-    organization = "hashicorp"
-    repository = "crt-workflows-common"
-    workflow = "post-publish-website"
-  }
-
-  notification {
-    on = "always"
-  }
-}
-
-event "bump-version" {
-  depends = ["post-publish-website"]
-  action "bump-version" {
-    organization = "hashicorp"
-    repository = "crt-workflows-common"
-    workflow = "bump-version"
-  }
-}
-
-event "update-ironbank" {
-  depends = ["bump-version"]
-  action "update-ironbank" {
-    organization = "hashicorp"
-    repository = "crt-workflows-common"
-    workflow = "update-ironbank"
-  }
-
-  notification {
-    on = "fail"
-  }
-}
-
 event "crt-generate-sbom" {
   depends = ["promote-production"]
   action "crt-generate-sbom" {
@@ -182,6 +112,7 @@ event "crt-generate-sbom" {
 	repository = "security-generate-release-sbom"
 	workflow = "crt-generate-sbom"
   }
+
   notification {
 	on = "fail"
   }