chore: add separate workflow for cache invalidation (#2937)

* chore: move cache invalidation job to separate workflow file

* chore: add reference to cdn invalidation in promote workflows

.github/workflows/cache-invalidation.yml

@@ -0,0 +1,21 @@
+name: Invalidate CDN cache
+
+on:
+  [workflow_call, workflow_dispatch]
+
+jobs:
+  invalidate-cdn-cache:
+    needs: [ promote ]
+    runs-on: ubuntu-latest
+    env:
+      CLOUDFRONT_DISTRIBUTION: ${{ secrets.CLOUDFRONT_DISTRIBUTION }}
+      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+      AWS_EC2_METADATA_DISABLED: true
+    steps:
+      - uses: actions/checkout@v3
+      - run: |
+          sudo apt-get update
+          sudo apt-get install -y awscli
+          aws configure set preview.cloudfront true
+      - run: ./scripts/postrelease/invalidate_cdn_cache

.github/workflows/promote-release.yml

@@ -44,20 +44,10 @@ jobs:
 
   ## POST release jobs
   invalidate-cdn-cache:
+    name: Invalidate CDN cache
     needs: [ promote ]
-    runs-on: ubuntu-latest
-    env:
-      CLOUDFRONT_DISTRIBUTION: ${{ secrets.CLOUDFRONT_DISTRIBUTION }}
-      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
-      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-      AWS_EC2_METADATA_DISABLED: true
-    steps:
-      - uses: actions/checkout@v3
-      - run: |
-          sudo apt-get update
-          sudo apt-get install -y awscli
-          aws configure set preview.cloudfront true
-      - run: ./scripts/postrelease/invalidate_cdn_cache
+    uses: ./.github/workflows/cache-invalidation.yml
+    secrets: inherit
 
   release-homebrew:
     needs: [ invalidate-cdn-cache ]

.github/workflows/promote-windows.yml

@@ -47,4 +47,10 @@ jobs:
         run: |
           SHA=$(npm view heroku@${{ inputs.version }} --json | jq -r '.gitHead[0:7]')
           yarn oclif promote --win --root="./packages/cli" --sha="$SHA" --indexes --version=${{ inputs.version }} --channel=${{ fromJSON(inputs.isStableRelease) && 'stable' || env.prerelease-channel }}
-        shell: bash
+        shell: bash
+
+  invalidate-cdn-cache:
+    name: Invalidate CDN cache
+    needs: [ promote ]
+    uses: ./.github/workflows/cache-invalidation.yml
+    secrets: inherit