fixup security bump script (servo#713)

Some fixups for servo#711

---------

Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com>

Author: sagudev

.github/workflows/security-bump.yml

@@ -20,6 +20,19 @@ jobs:
               with:
                   python-version: "3.13"
             - run: pip install requests
+            - run: |
+                  git config user.name 'servo-bot'
+                  git config user.email 'ghbot+mozjs-sm-bump@servo.org'
             - run: python3 ./mozjs-sys/etc/sm-security-bump.py
+              id: bump
             - name: Create Pull Request
               uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0
+              with:
+                  title: Security bump SpiderMonkey to ${{ steps.bump.outputs.version }}
+                  body: |
+                      Bump SpiderMonkey to ${{ steps.bump.outputs.version }} (changeset: [${{ steps.bump.outputs.changeset }}](https://github.com/servo/mozjs/releases/download/mozjs-source-${{ steps.bump.outputs.changeset }}))
+                  branch-token: ${{ secrets.SERVO_BOT }}
+                  token: ${{ secrets.PR_TOKEN }}
+                  push-to-fork: servo-bot/mozjs
+                  author: servo-bot <ghbot+mozjs-sm-bump@servo.org>
+                  branch: security-bump-esr${{ steps.bump.outputs.esr }}

mozjs-sys/etc/sm-security-bump.py

@@ -24,6 +24,14 @@
 except subprocess.CalledProcessError:
     pass
 
+if GITHUB_OUTPUT := os.getenv("GITHUB_OUTPUT"):
+    with open(GITHUB_OUTPUT, "a") as github_output_file:
+        print(f"tag={tag}", file=github_output_file)
+        print(f"changeset={changeset}", file=github_output_file)
+        print(f"version={ESR}.{int(minor_patch)}", file=github_output_file)
+        print(f"esr={ESR}", file=github_output_file)
+
+
 download_from_taskcluster(changeset)
 
 subprocess.check_call(
@@ -39,6 +47,7 @@
         "servo/mozjs",
         "--title",
         f"SpiderMonkey {tag}",
+        "--latest=false",
         "--notes",
         f"Source code for SpiderMonkey {tag} (changeset: [{changeset}](https://hg.mozilla.org/releases/{REPO}/rev/{changeset}))",
     ]