Update dependencies using github actions

[nawazkh]

What type of PR is this?
/kind cleanup

What this PR does / why we need it:

• This PR adds a GitHub workflow to update versions for
  • CONTROLLER_GEN
  • CONVERSION_GEN
  • KUSTOMIZE
  • AZWI
  • MOCKGEN
  • RELEASE_NOTES
  • KUBECTL
  • HELM
  • YQ
  • CODESPELL
• The GitHub workflow will create individual PRs for each of the updated dependency.
  • Run every Sunday at midnight UTC.
  • PR is titled as [dependency] bump $tool to $latest"
• hack/tools/tools.yaml now becomes the source of truth for the versions of the tools consumed in CAPZ's Makefile (tools that cannot be updated via existing dependabot workflow).

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Fixes #N/A

Special notes for your reviewer:

• Idea here is that Github workflow checks every week and creates individual PRs for each dependency.
  • It would be the responsibility of the maintainer to approve/reject the PR.
• Dependabot is not used here because dependabot did not support updating binaries like kustomize, azwi, kpromo. Doing via GitHub action unifies the automation workflow and is also easier to maintain.
• Note: Update Tool Versions workflow can also be triggered manually.

TODOs:

• squashed commits
• includes documentation
• adds unit tests
• cherry-pick candidate

Release note:

NONE

[k8s-ci-robot]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign jackfrancis for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[nawazkh]

This change is just reorganizing the Makefile.

[nawazkh]

/label tide/merge-method-squash

[nawazkh]

Testing the workflow, will remove the latest commit before merging.
/hold

[nawazkh]

Ran this GitHub workflow in my local and it resulted in below output as expected 🟢

Run set -euo pipefail
kubectl
v1.29.10
v1.31.0
Switched to a new branch 'update-tool-kubectl-v1.31.0'
Updating kubectl from v1.29.10 to v1.31.0
[update-tool-kubectl-v1.31.0 cbe38dd] dependency: bump kubectl to v1.31.0
 1 file changed, 1 insertion(+), 1 deletion(-)
To https://github.com/nawazkh/cluster-api-provider-azure
 + be21e86...cbe38dd update-tool-kubectl-v1.31.0 -> update-tool-kubectl-v1.31.0 (forced update)
Warning: 1 uncommitted change
https://github.com/nawazkh/cluster-api-provider-azure/pull/77
Switched to branch 'main'
Your branch is up to date with 'origin/main'.
HEAD is now at 636a2cc Tools dot yaml (#76)
Removing gh_2.49.0_linux_amd64/LICENSE
Removing gh_2.49.0_linux_amd64/share/
mockgen
v0.4.0
v1.6.0
Updating mockgen from v0.4.0 to v1.6.0
v3.17.3
Updating helm from v3.14.4 to v3.17.3
Switched to a new branch 'update-tool-helm-v3.17.3'
[update-tool-helm-v3.17.3 dbe9f55] dependency: bump helm to v3.17.3
 1 file changed, 1 insertion(+), 1 deletion(-)
remote: 
remote: Create a pull request for 'update-tool-helm-v3.17.3' on GitHub by visiting:        
remote:      https://github.com/nawazkh/cluster-api-provider-azure/pull/new/update-tool-helm-v3.17.3        
remote: 
To https://github.com/nawazkh/cluster-api-provider-azure
 * [new branch]      update-tool-helm-v3.17.3 -> update-tool-helm-v3.17.3
https://github.com/nawazkh/cluster-api-provider-azure/pull/84
Switched to branch 'main'
Your branch is up to date with 'origin/main'.
HEAD is now at 636a2cc Tools dot yaml (#76)
yq
v4.35.2
v4.45.4
Updating yq from v4.35.2 to v4.45.4
Switched to a new branch 'update-tool-yq-v4.45.4'
[update-tool-yq-v4.45.4 10141cf] dependency: bump yq to v4.45.4
 1 file changed, 1 insertion(+), 1 deletion(-)
remote: 
remote: Create a pull request for 'update-tool-yq-v4.45.4' on GitHub by visiting:        
remote:      https://github.com/nawazkh/cluster-api-provider-azure/pull/new/update-tool-yq-v4.45.4        
remote: 
To https://github.com/nawazkh/cluster-api-provider-azure
 * [new branch]      update-tool-yq-v4.45.4 -> update-tool-yq-v4.45.4
https://github.com/nawazkh/cluster-api-provider-azure/pull/85
Switched to branch 'main'
Your branch is up to date with 'origin/main'.
HEAD is now at 636a2cc Tools dot yaml (#76)

And created the following PRs in my fork

[nawazkh]

/unhold

[nawazkh]

Upon closer inspection, kpromo's latest does not get fetched from https://api.github.com/repos/kubernetes-sigs/kpromo/releases/latest
/hold

[nawazkh]

/test pull-cluster-api-provider-azure-e2e

[k8s-ci-robot]

@nawazkh: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
pull-cluster-api-provider-azure-e2e	9f8bf2c	link	true	/test pull-cluster-api-provider-azure-e2e

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[k8s-ci-robot]

PR needs rebase.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.