ci: open PR for post-release version bump instead of direct push

[jbachorik]

What does this PR do?:
The release script tried to push the post-release version bump commit directly to main, which is now blocked by the branch ruleset requiring all changes to go through a PR.

Instead of pushing directly, the script now:

1. Creates a automated/bump-X-Y-Z branch with the version bump commit
2. Opens a PR targeting main
3. Surfaces the PR URL in the workflow step summary so a reviewer can find it immediately

Motivation:
Branch ruleset enforcement broke the Validated Release workflow — direct pushes to main are no longer allowed. The bypass actor approach is locked down at org level, so a PR-based flow is the only path.

Additional Notes:
The release itself (tag + release branch + GitLab trigger) is unblocked. The version bump PR is a required manual follow-up step.

How to test the change?:
Run the Validated Release workflow with dry_run: true — the bump path is skipped in dry-run so no PR is created. A real run will create the bump PR and print its URL in the job summary.

For Datadog employees:

• If this PR touches code that signs or publishes builds or packages, or handles
  credentials of any kind, I've requested a review from @DataDog/security-design-and-guidance.
• This PR doesn't touch any of that.
• JIRA: [JIRA-XXXX]

Labels: AI

[datadog-datadog-prod-us1]

✨ Fix all issues with BitsAI

⚠️ Warnings

🚦 4 Pipeline jobs failed

DataDog/java-profiler | gtest-asan-arm64     

🔧 Fix in code (Fix with Cursor).

LeakSanitizer detected memory leaks in Arguments::parse at /go/src/github.com/DataDog/java-profiler/ddprof-lib/src/main/cpp/arguments.cpp:119:18.

DataDog/java-profiler | gtest-tsan-amd64     

🔧 Fix in code (Fix with Cursor).

Segmentation fault occurred while executing the test binary.

DataDog/java-profiler | gtest-asan-amd64     

🛟 This job is unlikely to succeed on retry. Please review your pipeline configuration.

Failed to extract cache due to 403 Forbidden errors while checking multiple caches.

View all 4 failed jobs.

Useful? React with 👍 / 👎

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 462a828 | Docs | Datadog PR Page | Give us feedback!}

[dd-octo-sts]

CI Test Results

Run: #26508489831 | Commit: 14504c4 | Duration: 3h 0m 15s (longest job)

✅ All 32 test jobs passed

Status Overview

JDK	glibc-aarch64/debug	glibc-amd64/debug	musl-aarch64/debug	musl-amd64/debug
8	-	✅	-	-
8-ibm	-	✅	-	-
8-j9	✅	✅	-	-
8-librca	-	-	✅	✅
8-orcl	-	✅	-	-
11	-	✅	-	-
11-j9	✅	✅	-	-
11-librca	-	-	✅	✅
17	✅	✅	-	-
17-graal	✅	✅	-	-
17-j9	✅	✅	-	-
17-librca	-	-	✅	✅
21	✅	✅	-	-
21-graal	✅	✅	-	-
21-librca	-	-	✅	✅
25	✅	✅	-	-
25-graal	✅	🚫	-	-
25-librca	-	-	✅	✅

Legend: ✅ passed | ❌ failed | ⚪ skipped | 🚫 cancelled

Summary: Total: 32 | Passed: 31 | Failed: 0 | Cancelled: 1

---

Updated: 2026-05-27 14:33:16 UTC