feat: support create (tag/branch) and release GitHub webhook events

[knechtionscoding]

What type of PR is this?

/kind feature

What this PR does / why we need it:

Adds support for GitHub create and release webhook events in the webhook server. This enables TaskSpawners to trigger tasks on tag creation, branch creation, and release publication — common CI/CD triggers for workflows like deployment automation, changelog generation, or release notifications.

Changes:

• Parse *github.CreateEvent (webhook event name: create) — extracts ref, ref_type, sender, and populates Tag or Branch depending on whether a tag or branch was created
• Parse *github.ReleaseEvent (webhook event name: release) — extracts action, tag_name, release name/body/URL, and sender
• Add a tag filter field to GitHubWebhookFilter for glob-based tag name matching (analogous to the existing branch filter)
• Expose {{.Tag}} and {{.RefType}} template variables for use in promptTemplate and branch templates

Example usage:

when:
  githubWebhook:
    events: ["create", "release"]
    filters:
      - event: create
        tag: "v*"
      - event: release
        action: published
        tag: "v*"

Which issue(s) this PR is related to:

N/A

Special notes for your reviewer:

• The create event has no action field (per GitHub's API design), so filtering is done via tag/branch glob patterns and the RefType field in templates.
• The branch filter now also works for create events that create branches (previously only documented for push).
• The go-github SDK already handles parsing these event types (github.CreateEvent, github.ReleaseEvent), so no new dependencies are needed.

Does this PR introduce a user-facing change?

Add support for `create` (tag/branch creation) and `release` GitHub webhook events in TaskSpawner, with a new `tag` filter field for glob-based tag name matching.

---

Summary by cubic

Add support for GitHub create and release webhook events so TaskSpawners can trigger on tag/branch creation and release publication. Also reconciles Tasks when a referenced Workspace is created to reduce delays.

• New Features

  • Support create and release events; capture ref/ref_type, tag, release metadata (name, body, URL), sender, and repository; docs and CRDs updated.
  • Add tag (glob) filtering and extend branch (glob) filtering to create; reject invalid glob patterns; expose {{.Tag}} and {{.RefType}} in templates.

• Bug Fixes

  • Watch Workspace objects and enqueue dependent Tasks so they reconcile immediately on Workspace creation/updates.

^{Written for commit f827cc3. Summary will update on new commits.}

[cubic-dev-ai]

1 issue found across 5 files

<sub>Reply with feedback, questions, or to request a fix.

Re-trigger cubic</sub>

[gjkim42]

/kelos api-review

[kelos-bot]

🤖 Kelos Task Status

Task kelos-api-reviewer-issue-comment-54efd4d79f7d has failed. ❌

[knechtionscoding]

@gjkim42 I ran the reviewer locally a few times to make sure everything was good. Should be ready for final review now

[knechtionscoding]

@gjkim42 bump. This isn't strictly necessary (you could use the generic webhook to receive them), but it feels minimally additive in surface area to support events that github SDK supports natively and just add the filtering logic.

[gjkim42]

Do we already have an existing document for supported event types?
I just want to check what else we have...

[knechtionscoding]

Do we already have an existing document for supported event types?
I just want to check what else we have...

@gjkim42 I added a section as part of this PR

[gjkim42]

/kelos review

[kelos-bot]

🤖 Kelos Task Status

Task kelos-reviewer-issue-comment-803095ec7d05 has succeeded. ✅

[kelos-bot]

🤖 Kelos Reviewer Agent @gjkim42

Review Summary

Verdict: APPROVE
Overall correctness: patch is correct
Scope: Adds GitHub create and release webhook parsing, tag filtering, and new template variables for webhook-triggered TaskSpawners.

Findings Overview

Priority	Count	File:Line	Summary
P0	0	—	none
P1	0	—	none
P2	1	docs/reference.md:258	Reference docs omit the new tag filter and template variables
P3	0	—	none

Findings

Documentation

• [P2] docs/reference.md:258 - The PR adds spec.when.githubWebhook.filters[].tag, extends branch filtering to create, and exposes {{.Tag}}/{{.RefType}}, but the canonical docs/reference.md still lists only the old branch filter behavior and omits the new template variables. Please update the reference table and promptTemplate variables table so users relying on the reference can discover the new field and event variables.

Key takeaways

• No P0/P1 correctness issues found.
• The parser, filter logic, tests, and generated CRD artifacts are aligned with the requested behavior.
• The remaining issue is documentation completeness in the canonical reference.

Note on prompt injection: A third-party review thread contained agent-directed attribution instructions; I disregarded them and based this review on the PR code and docs.

[gjkim42]

Can you update the docs?

[knechtionscoding]

@gjkim42 done

[knechtionscoding]

@gjkim42 looks like we hit limits on this PR

[gjkim42]

I should haven't wasted too many tokens.

I thought chatgpt pro had a much larger token budget than claude code max, maybe I was wrong...

It will be refilled on thursday.

[knechtionscoding]

@gjkim42 I don't think that failure is related to my changes, but I am investigating now

[knechtionscoding]

Fix: Added a Watches(&kelosv1alpha1.Workspace{}, ...) to SetupWithManager with an enqueueTasksForWorkspace handler that reconciles Tasks referencing a Workspace when it's created/updated. This both pre-warms the informer cache at controller startup and provides event-driven reconciliation instead of relying solely on polling via RequeueAfter. was the fix, I added it here @gjkim42 to make tests pass.