Chore: [AEA-0000] - tag release in jira using semantic-release

[anthony-nhs]

Summary

• Routine Change

Details

• tag release in jira using semantic release
• remove updating jira/confluence from here

[github-actions]

This PR is linked to a ticket in an NHS Digital JIRA Project. Here's a handy link to the ticket:

AEA-0000

[Copilot]

Pull request overview

Updates the release automation to rely on the shared tag-release-devcontainer workflow’s Jira integration (semantic-release based), and removes this repo’s bespoke Confluence/Jira update steps/scripts from the release pipeline.

Changes:

• Bump NHSDigital/eps-common-workflows tag-release-devcontainer reference and grant required job permissions.
• Enable Jira release tagging via the reusable workflow (update_jira, jira_release_prefix) and remove Confluence/Jira update inputs/steps from local reusable release workflow usage.
• Add a new Trivy ignore entry for a fast-xml-parser CVE and delete legacy Jira/Confluence helper scripts.

Reviewed changes

Copilot reviewed 10 out of 10 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
.trivyignore.yaml	Adds a new CVE ignore entry for fast-xml-parser.
.github/workflows/run_release_code_and_api.yml	Removes workflow-call inputs and steps related to Confluence/Jira release note updates.
.github/workflows/release.yml	Switches tag-release workflow ref, adds permissions, and enables Jira update via the reusable workflow; removes old release-note inputs.
.github/workflows/pull_request.yml	Updates tag-release workflow ref and adds permissions for the reusable job.
.github/workflows/ci.yml	Updates tag-release workflow ref and adds permissions; removes old release-note inputs.
.github/scripts/get_target_deployed_tag.sh	Deletes legacy Confluence/Jira release-note helper script.
.github/scripts/get_current_dev_tag.sh	Deletes legacy Confluence/Jira release-note helper script.
.github/scripts/create_int_rc_release_notes.sh	Deletes legacy Confluence/Jira release-note helper script.
.github/scripts/create_env_release_notes.sh	Deletes legacy Confluence/Jira release-note helper script.
.github/scripts/call_mark_jira_released.sh	Deletes legacy Jira “mark released” helper script.

Comments suppressed due to low confidence (2)

.github/scripts/create_env_release_notes.sh:1

• This script is still referenced by the composite action .github/actions/update_confluence_jira/action.yml (which also references other scripts removed in this PR). With this deletion, that composite action definition in this repo is now broken if invoked. Either remove/update the composite action (and any docs referencing it) as part of this change, or keep the required scripts in .github/scripts.
  .github/scripts/call_mark_jira_released.sh:1
• This script is still referenced by the composite action .github/actions/mark_jira_released/action.yml. After deleting it, that composite action is now broken if invoked. Either remove/update the composite action (and any docs referencing it) as part of this change, or keep the required script in .github/scripts.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud