Add updatecli for RKE2 release detection targeting dev-v2.13

[Copilot]

Adds automated detection of new RKE2 releases from github.com/rancher/rke2, opening PRs to the dev-v2.13 branch when new releases are found.

Changes

• updatecli/values.yaml - Standard updatecli config values (github-actions bot credentials)
• updatecli/updatecli.d/rke2-release.yaml - Release detection manifest:
  • Sources latest stable release from rancher/rke2 (filters drafts/prereleases)
  • Checks if version exists in channels-rke2.yaml before acting
  • Opens PR with release details when new version detected
• .github/workflows/updatecli.yml - Daily cron at 06:00 UTC + manual trigger, cleans up stale updatecli branches

Pattern

Follows established updatecli patterns from rancher/rke2:

sources:
  rke2-release:
    kind: "githubrelease"
    spec:
      owner: rancher
      repository: rke2
      versionfilter:
        kind: regex
        pattern: 'v[0-9]+\.[0-9]+\.[0-9]+\+rke2r[0-9]+'

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com//advisories
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

Add in updatecli (using github.com/rancher/rke2 for examples) that will open a PR into the dev-2.13 branch when a new RKE2 release is detected from github.com/rancher/rke2

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.