#439 ci: auto-merge only stable Infrahub releases

Problem

auto-merge-testcontainers.yml merges any green update-infrahub-* pull request from opsmill-bot, including pre-releases. opsmill-bot auto-merged Infrahub 1.12.0b0 and 1.12.0b1 in:

• https://github.com/opsmill/infrahub-demo-service-catalog/pull/137
• https://github.com/opsmill/infrahub-demo-service-catalog/pull/144
• https://github.com/opsmill/nornir-infrahub/pull/109
• https://github.com/opsmill/nornir-infrahub/pull/115
• https://github.com/opsmill/infrahub-ansible/pull/435
• https://github.com/opsmill/infrahub-ansible/pull/438

Change

Two checks before the merge. Each one leaves the pull request open with a notice:

• The version in the branch name (update-infrahub-<version>) must match ^[0-9]+\.[0-9]+\.[0-9]+$.
• The new infrahub-testcontainers pin must not contain a pre-release marker (a, b, c, rc, alpha, beta, pre, preview, dev).

Pre-release bump pull requests still open and run CI, so people can test betas. A person merges them.

The same change is applied to every repository that has this workflow:

• infrahub-demo-dc
• infrahub-demo-service-catalog
• infrahub-demo-sp
• infrahub-demo-otn
• infrahub-solution-ai-dc
• infrahub-arista-avd
• nornir-infrahub
• infrahub-ansible

Tests

• Branch check, tested locally: 1.11.11 merges. 1.12.0b1, 1.12.0rc1, 1.12.0.dev3, 1.12.0a0, 1.12 and 1.12.0-beta stay open.
• Pin check, tested locally: >=1.11.11 and ==1.12.0 pass. >=1.12.0b1, >=1.12.0rc2,<2 and >=1.12.0.dev1 stay open.
• actionlint passes.

🤖 Generated with Claude Code