Replace third-party release actions with gh CLI

[Copilot]

Removes dependency on two third-party GitHub Actions (ncipollo/release-action@v1, repo-sync/pull-request@v2) in the release workflow due to software supply chain concerns. Both are replaced with equivalent gh CLI invocations, which ships pre-installed on GitHub Actions runners.

Changes

• ncipollo/release-action@v1 → gh release create with --generate-notes
• repo-sync/pull-request@v2 → gh pr create
• Both steps use GH_TOKEN: ${{ secrets.PAT_TOKEN }} for authentication

- name: Pull Request
  env:
    GH_TOKEN: ${{ secrets.PAT_TOKEN }}
  run: |
    gh pr create \
      --base ${{ github.ref_name }} \
      --head automated-release-${{ github.event.inputs.releaseVersion }} \
      --title "Automated Release: ${{ github.event.inputs.releaseVersion }}" \
      --body ""

- name: Publish Release
  env:
    GH_TOKEN: ${{ secrets.PAT_TOKEN }}
  run: |
    gh release create v${{ github.event.inputs.releaseVersion }} \
      --title "v${{ github.event.inputs.releaseVersion }}" \
      --generate-notes

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Remove third-party release-action</issue_title>
<issue_description>The release-action in our current Github workflow is from a third party, I would rather not depend on a third-party action for something like releases due to software supply chain concerns. Instead

Can we switch to using the gh tool as documented here:

https://github.com/ruby/ruby-dev-builder/blob/b0bf59a17c17985d4692243d4689c273f6348fa5/.github/workflows/build.yml#L177-L181
</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes Remove third-party release-action #4609

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[brendandburns]

/lgtm
/approve

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: brendandburns, Copilot

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [brendandburns]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment