New version of the upgrade extra

.github/workflows/mirror-to-s3.yml

@@ -0,0 +1,44 @@
+name: Mirror updates manifests to S3
+on:
+  push:
+    branches: [updates.simplerisk.com, updates-test.simplerisk.com]
+
+permissions:
+  id-token: write   # for OIDC
+  contents: read
+
+jobs:
+  mirror:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Resolve channel prefix from branch
+        env:
+          REF_NAME: ${{ github.ref_name }}
+        run: |
+          set -euo pipefail
+          if [ "$REF_NAME" = "updates.simplerisk.com" ]; then
+            echo "PREFIX=latest/updates/" >> "$GITHUB_ENV"
+          elif [ "$REF_NAME" = "updates-test.simplerisk.com" ]; then
+            echo "PREFIX=testing/updates/" >> "$GITHUB_ENV"
+          else
+            echo "Unexpected branch: $REF_NAME" >&2
+            exit 1
+          fi
+
+      - name: Configure AWS credentials (OIDC)
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: ${{ vars.UPDATES_PUBLISHER_ROLE_ARN }}
+          aws-region: ${{ vars.AWS_REGION }}
+
+      - name: Upload manifests
+        env:
+          EXTRAS_BUCKET: ${{ vars.EXTRAS_BUCKET }}
+        run: |
+          set -euo pipefail
+          for f in releases.xml Current_Version.xml upgrade_path.xml announcements.xml extra_compatibility.xml; do
+            aws s3 cp "$f" "s3://$EXTRAS_BUCKET/${PREFIX}${f}" \
+              --content-type "text/xml" --no-progress
+          done

Current_Version.xml

@@ -16,6 +16,6 @@
     <organizational_hierarchy>20260519-001</organizational_hierarchy>
     <separation>20260519-001</separation>
     <ucf>20260519-001</ucf>
-    <upgrade>20260519-001</upgrade>
+    <upgrade>20260604-001</upgrade>
     <vulnmgmt>20260519-001</vulnmgmt>
 </current_version>

extra_compatibility.xml

@@ -2673,6 +2673,9 @@
         </extra>
     </ucf>
     <upgrade>
+        <extra version="20260604-001">
+            <appversion>20260519-001</appversion>
+        </extra>
         <extra version="20260519-001">
             <appversion>20260519-001</appversion>
         </extra>

releases.xml

@@ -32,6 +32,7 @@
             <organizational_hierarchy version="20260519-001" />
             <separation version="20260519-001" />
             <ucf version="20260519-001" />
+            <upgrade version="20260604-001" />
             <upgrade version="20260519-001" />
             <vulnmgmt version="20260519-001" />
         </extras>