Maintenance: Fix concurrent git update breaking changelog generation

[heitorlessa]

Summary

We need to ensure GH Actions git client can pull and rebase before pushing any changes to reduce the off chances a concurrent update prevents a push.

Why is this needed?

We auto-merge safe dependencies from dependabot. In rare incidents, this caused the release to fail as the Git tip was not up to date. For typical workflows this isn't a challenge, but for releases where it might have ~2m gap between checkout and push this can happen more often.

Which area does this relate to?

Governance

Solution

Solution differs from the usual git pull --rebase origin <BRANCH>, because git is in detached mode when workflows are trigger under release notes. We need a solution that solves both -- PR incoming.

Acknowledgment

• This request meets Lambda Powertools Tenets
• Should this be considered in other Lambda Powertools languages? i.e. Java, TypeScript

[github-actions]

This is now released under 1.28.0 version!