Add Brew Bump Workflows (#2934)

.github/workflows/brew-bump-cli.yml

@@ -0,0 +1,42 @@
+---
+name: Bump CLI Formula
+
+on:
+  push:
+    tags:
+      - cli-v**
+  workflow_dispatch:
+
+defaults:
+  run:
+    shell: bash
+
+jobs:
+  update-desktop-cask:
+    name: Update Bitwarden CLI Formula
+    runs-on: macos-11
+    steps:
+      - name: Login to Azure
+        uses: Azure/login@1f63701bf3e6892515f1b7ce2d2bf1708b46beaf
+        with:
+          creds: ${{ secrets.AZURE_PROD_KV_CREDENTIALS }}
+
+      - name: Retrieve secrets
+        id: retrieve-secrets
+        uses: Azure/get-keyvault-secrets@b5c723b9ac7870c022b8c35befe620b7009b336f
+        with:
+          keyvault: "bitwarden-prod-kv"
+          secrets: "brew-bump-workflow-pat"
+
+      - name: Update Homebrew formula
+        uses: dawidd6/action-homebrew-bump-formula@dd221ff435f42fa8102b5871bb1929af9d76476c
+        with:
+          # Required, custom GitHub access token with the 'public_repo' and 'workflow' scopes
+          token: ${{ steps.retrieve-secrets.outputs.brew-bump-workflow-pat }}
+          org: bitwarden
+          tap: Homebrew/homebrew-core
+          cask: bitwarden-cli
+          tag: ${{ github.ref }}
+          revision: ${{ github.sha }}
+          force: false
+          dryrun: true

.github/workflows/brew-bump-desktop.yml

@@ -0,0 +1,42 @@
+---
+name: Bump Desktop Cask
+
+on:
+  push:
+    tags:
+      - desktop-v**
+  workflow_dispatch:
+
+defaults:
+  run:
+    shell: bash
+
+jobs:
+  update-desktop-cask:
+    name: Update Bitwarden Desktop Cask
+    runs-on: macos-11
+    steps:
+      - name: Login to Azure
+        uses: Azure/login@1f63701bf3e6892515f1b7ce2d2bf1708b46beaf
+        with:
+          creds: ${{ secrets.AZURE_PROD_KV_CREDENTIALS }}
+
+      - name: Retrieve secrets
+        id: retrieve-secrets
+        uses: Azure/get-keyvault-secrets@b5c723b9ac7870c022b8c35befe620b7009b336f
+        with:
+          keyvault: "bitwarden-prod-kv"
+          secrets: "brew-bump-workflow-pat"
+
+      - name: Update Homebrew cask
+        uses: macauley/action-homebrew-bump-cask@445c42390d790569d938f9068d01af39ca030feb
+        with:
+          # Required, custom GitHub access token with the 'public_repo' and 'workflow' scopes
+          token: ${{ steps.retrieve-secrets.outputs.brew-bump-workflow-pat }}
+          org: bitwarden
+          tap: Homebrew/homebrew-cask
+          cask: bitwarden
+          tag: ${{ github.ref }}
+          revision: ${{ github.sha }}
+          force: false
+          dryrun: true

.github/workflows/build-web.yml

@@ -26,7 +26,10 @@ on:
       - '!*.txt'
       - '.github/workflows/build-web.yml'
   workflow_dispatch:
-    inputs: {}
+    inputs:
+      custom_tag_extension:
+        description: "Custom image tag extension"
+        required: false
 
 jobs:
   cloc: