Update github workflow

Author: dodinh

.github/workflows/push-to-remote.yml

@@ -1,27 +1,44 @@
-name: Push to remote repo on incoming push to this repo
-on: [ push, workflow_dispatch ]
+name: Push to ADO and create PR
+on:
+  push:
+    branches:
+      - develop
+  create: # trigger on tag creation
+  workflow_dispatch: # trigger explicitly
 jobs:
-  push-to-remote:
+  push-to-ado:
     runs-on: ubuntu-latest
-    if: github.ref == 'refs/heads/main' # run this job only for the main branch
+    if: github.ref == 'refs/heads/develop' || startsWith(github.ref, 'refs/tags/')
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
-          persist-credentials: false # otherwise, the token used is the GITHUB_TOKEN, instead of the personal access token.
-          fetch-depth: 0  # otherwise, there would be errors pushing refs to the destination repository.
-          ref: main
-      - name: Push checked out repo to remote
-        env:
-          URL: ${{ secrets.REMOTE_URL }}
-          PAT: ${{ secrets.REMOTE_PAT }}
+          ref: ${{ github.event_name == 'create' && 'main' || github.ref_name }}
+          persist-credentials: false
+          fetch-depth: 0
+      - name: If triggered by tag, verify tag is on main branch
+        if: startsWith(github.ref, 'refs/tags/')
         run: |
-          echo -e "* On branch"
-          echo -e "---"
-          git branch --show-current
-          echo -e "\n* List checked out contents of github repo"
-          echo -e "---"
-          ls -l
-          echo -e "\n* Push main branch to remote repo"
-          echo -e "---"
-          # git -c http.extraheader="Authorization: Basic $PAT" push --force $URL main
-          git -c http.extraheader="Authorization: Basic $PAT" push $URL main:temp
+          TAG_COMMIT_SHA="${{ github.sha }}"
+          if ! git log --first-parent --pretty=format:%H "refs/heads/main" | grep -q "^$TAG_COMMIT_SHA$"; then
+            echo "Tag '${{ github.ref_name }}' is not on main, skipping push"
+            exit 1
+          fi
+      - name: Push to ADO
+        run: |
+          SOURCE_BRANCH="${{ github.event_name == 'create' && 'main' || github.ref_name }}"
+          TARGET_REMOTE_BRANCH="${SOURCE_BRANCH}"
+          if [ "${SOURCE_BRANCH}" == "main" ]; then
+            TARGET_REMOTE_BRANCH="release"
+          fi
+          echo "Pushing ${SOURCE_BRANCH} (github)) to ${TARGET_REMOTE_BRANCH} (${vars.REMOTE_REPO_URL})..."
+          git -c http.extraheader="Authorization: Basic ${{ secrets.REMOTE_PAT }}" push --force "${{ vars.REMOTE_REPO_URL }}" "${SOURCE_BRANCH}:${TARGET_REMOTE_BRANCH}"
+  create-ado-pr:
+    runs-on: ubuntu-latest
+    needs: push-to-ado
+    if: startsWith(github.ref, 'refs/tags/')
+    steps:
+      - name: Create ADO pull request
+        run: |
+          echo "Creating Pull Request from 'release' to 'main' in Azure DevOps for tag '${{ github.ref_name }}'..."
+          curl -X POST -H "Content-Type: application/json" -H "Authorization: Basic ${{ secrets.REMOTE_PAT }}" "${{ vars.REMOTE_PR_URL }}" \
+            -d "{ \"sourceRefName\": \"refs/heads/release\", \"targetRefName\": \"refs/heads/main\", \"title\": \"Automated PR: ${{ github.ref_name }}\" }"