[GHES release note automation] Change the author of auto-comments on release issues to docs-bot (#60817)

Author: sarahs

.github/workflows/notify-release-pms.yml

@@ -0,0 +1,76 @@
+name: Notify release PMs
+
+# **What it does**: Posts review notification comments on release issues
+# in github/releases for generated GHES release notes.
+# **Why we have it**: So comments are always posted by docs-bot, without
+# needing to distribute a PAT to individual team members.
+# **Who does it impact**: Docs content (GHES release DRIs).
+
+on:
+  workflow_dispatch:
+    inputs:
+      release:
+        description: 'GHES release version (e.g., 3.21)'
+        type: string
+        required: true
+      pr:
+        description: 'docs-internal PR number containing the release notes'
+        type: string
+        required: true
+      release_type:
+        description: 'Release type (auto-detects from files if not specified)'
+        type: choice
+        options:
+          - auto
+          - rc
+          - ga
+        default: 'auto'
+      review_date:
+        description: 'Override review deadline (YYYY-MM-DD, optional)'
+        type: string
+        required: false
+      dry_run:
+        description: 'Preview comments in the workflow log without posting them'
+        type: boolean
+        default: false
+
+permissions:
+  contents: read
+
+jobs:
+  notify:
+    name: Notify release PMs
+    if: github.repository == 'github/docs-internal'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository code
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+
+      - uses: ./.github/actions/node-npm-setup
+
+      - name: Post notification comments
+        env:
+          DOCS_BOT_PAT_BASE: ${{ secrets.DOCS_BOT_PAT_BASE }}
+          INPUT_RELEASE: ${{ inputs.release }}
+          INPUT_PR: ${{ inputs.pr }}
+          INPUT_RELEASE_TYPE: ${{ inputs.release_type }}
+          INPUT_REVIEW_DATE: ${{ inputs.review_date }}
+          INPUT_DRY_RUN: ${{ inputs.dry_run }}
+        run: |
+          args=(--release "$INPUT_RELEASE" --pr "$INPUT_PR")
+
+          if [[ "$INPUT_RELEASE_TYPE" == "rc" ]]; then
+            args+=(--rc)
+          elif [[ "$INPUT_RELEASE_TYPE" == "ga" ]]; then
+            args+=(--ga)
+          fi
+
+          if [[ -n "$INPUT_REVIEW_DATE" ]]; then
+            args+=(--review-date "$INPUT_REVIEW_DATE")
+          fi
+
+          if [[ "$INPUT_DRY_RUN" == "true" ]]; then
+            args+=(--dry-run)
+          fi
+
+          npm run notify-release-pms -- "${args[@]}"

src/ghes-releases/scripts/README.md

@@ -71,8 +71,28 @@ npm run generate-release-notes -- --release 3.21 --force
 
 After you open a pull request with the generated notes, this script posts a review comment on each source issue in `github/releases`. The comment asks the PM to review their note in the docs PR and react with 🚀 when they approve.
 
+Comments are always posted by the `docs-bot` account.
+
+### Running via GitHub Actions (recommended)
+
+The easiest way to run this is via the **Notify release PMs** workflow, which handles authentication automatically:
+
 ```bash
-npm run notify-release-pms -- --release <version> --pr <number> [options]
+# From the CLI
+gh workflow run notify-release-pms.yml -f release=3.21 -f pr=12345
+
+# With options
+gh workflow run notify-release-pms.yml -f release=3.21 -f pr=12345 -f release_type=rc -f review_date=2026-04-25
+```
+
+You can also trigger it from the [Actions tab](https://github.com/github/docs-internal/actions/workflows/notify-release-pms.yml).
+
+### Previewing locally (dry run)
+
+You can preview comments locally without any token:
+
+```bash
+npm run notify-release-pms -- --release 3.21 --pr 12345 --dry-run
 ```
 
 ### Options
@@ -155,7 +175,7 @@ npm run check-release-approvals -- --release 3.21 --json
 1. **Generate notes:** `npm run generate-release-notes -- --release 3.21 --rc`
 2. **Review the output** in `data/release-notes/enterprise-server/3-21/0-rc1.yml`—clean up any TODO placeholders or unknown headings.
 3. **Open a draft PR** with the generated file.
-4. **Notify PMs:** `npm run notify-release-pms -- --release 3.21 --rc --pr <PR_NUMBER>`
+4. **Notify PMs:** `gh workflow run notify-release-pms.yml -f release=3.21 -f pr=<PR_NUMBER> -f release_type=rc`
 5. **Wait for approvals.** PMs react with 🚀 on their release issues.
 6. **Check status:** `npm run check-release-approvals -- --release 3.21 --rc`
 7. Once all approved, finalize the PR.

src/ghes-releases/scripts/check-release-approvals.ts

@@ -14,6 +14,8 @@ import fs from 'fs'
 import path from 'path'
 import ora from 'ora'
 
+import { buildMarker } from '@/ghes-releases/scripts/notify-release-pms'
+
 // ─── Types ───────────────────────────────────────────────────────────────────
 
 interface ApprovalStatus {
@@ -195,7 +197,7 @@ program
     // ── Step 2: Check each issue ──
     const isRc = yamlPath === rcPath
     const releaseType = isRc ? 'rc' : 'ga'
-    const marker = `<!-- ghes-release-note-review: ${release}-${releaseType} -->`
+    const marker = buildMarker(release, releaseType)
     const statuses: ApprovalStatus[] = []
 
     for (let i = 0; i < issueNumbers.length; i++) {