ci: Add comment with explanation when a release conflict is detected (#7162)

## Explanation

This adds some logic to #7114 to add a comment to a pull request if a
conflict was detected, either in the pull request checks or in the merge
queue. Old comments will be hidden automatically as well:

<img width="933" height="475" alt="image"
src="https://github.com/user-attachments/assets/94153654-9aea-4b97-b67a-19205f8fdb7c"
/>

## References

<!--
Are there any issues that this pull request is tied to?
Are there other links that reviewers should consult to understand these
changes better?
Are there client or consumer pull requests to adopt any breaking
changes?

For example:

* Fixes #12345
* Related to #67890
-->

## Checklist

- [ ] I've updated the test suite for new or updated code as appropriate
- [ ] I've updated documentation (JSDoc, Markdown, etc.) for new or
updated code as appropriate
- [ ] I've communicated my changes to consumers by [updating changelogs
for packages I've
changed](https://github.com/MetaMask/core/tree/main/docs/contributing.md#updating-changelogs),
highlighting breaking changes as necessary
- [ ] I've prepared draft pull requests for clients and consumer
packages to resolve any breaking changes

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> Enhances the release-conflict check to post a PR comment (minimizing
old ones), expose outputs for conflicted package names, and
conditionally fail; updates workflow permissions.
> 
> - **CI / Release conflict checks**:
> - **Action `check-release`**
(`.github/actions/check-release/action.yml`):
> - Emits outputs `package-names` and `has-conflicts` instead of exiting
immediately upon conflicts; final separate step now fails when conflicts
exist.
>     - Adds `id: check-release` to expose outputs.
> - Posts a PR comment listing conflicted packages and notes merge-queue
context; hides previous such comments via GraphQL minimization.
>   - **Workflow** (`.github/workflows/main.yml`):
> - Grants `contents: read` and `pull-requests: write` permissions to
`check-release` job to allow commenting.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
3fe207d. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Author: Mrtenz

.github/actions/check-release/action.yml

@@ -30,6 +30,7 @@ runs:
         fi
 
     - name: Check commits for changes in released packages
+      id: check-release
       shell: bash
       env:
         GH_TOKEN: ${{ github.token }}
@@ -77,11 +78,84 @@ runs:
         fi
 
         if [ ${#CONFLICTS[@]} -ne 0 ]; then
+          PACKAGE_NAMES=()
+
           for conflict in "${CONFLICTS[@]}"; do
             package_name=$(jq -r ".name" "$conflict/package.json")
+            PACKAGE_NAMES+=("$package_name")
             echo "::error::Release conflict detected in \`$package_name\`. This package is being released in this PR, but files in the package were also modified ahead of this PR. Please ensure that all changes are included in the release."
           done
-          exit 1
+
+          PACKAGE_NAMES_JSON=$(printf '%s\n' "${PACKAGE_NAMES[@]}" | jq -R . | jq -s -c .)
+          echo "package-names=$PACKAGE_NAMES_JSON" >> "$GITHUB_OUTPUT"
+          echo "has-conflicts=true" >> "$GITHUB_OUTPUT"
         else
           echo "✅ No release conflicts detected."
         fi
+
+    - name: Hide previous comments
+      uses: actions/github-script@v8
+      env:
+        PR_NUMBER: ${{ inputs.pull-request }}
+      with:
+        script: |
+          const comments = await github.paginate(github.rest.issues.listComments, {
+            owner: context.repo.owner,
+            repo: context.repo.repo,
+            issue_number: process.env.PR_NUMBER,
+          });
+
+          for (const comment of comments) {
+            if (comment.body.includes('<!-- Pull request release conflict comment -->')) {
+              await github.graphql(`
+                mutation($commentId: ID!, $classifier: ReportedContentClassifiers!) {
+                  minimizeComment(input: {subjectId: $commentId, classifier: $classifier}) {
+                    minimizedComment {
+                      isMinimized
+                    }
+                  }
+                }
+              `, {
+                commentId: comment.node_id,
+                classifier: 'OUTDATED',
+              });
+            }
+          }
+
+    - name: Reply on pull request
+      if: steps.check-release.outputs.has-conflicts == 'true'
+      uses: actions/github-script@v8
+      env:
+        PACKAGE_NAMES: ${{ steps.check-release.outputs.package-names }}
+        PR_NUMBER: ${{ inputs.pull-request }}
+      with:
+        script: |
+          const packageNames = JSON.parse(process.env.PACKAGE_NAMES);
+          const packageList = packageNames.map(name => `- \`${name}\``).join('\n');
+
+          const mergeQueueNote = context.eventName === 'merge_group' ? ' while this pull request was in the merge queue' : '';
+
+          const body = `
+            ## Release conflict detected
+
+            The following packages are being released in this pull request, but files in these packages were also modified ahead of this pull request${mergeQueueNote}:
+
+            ${packageList}
+
+            Please ensure that all changes are included in the release by updating this pull request, and adjusting the changelogs and version bumps as necessary.
+
+            <!-- Pull request release conflict comment -->
+          `;
+
+          await github.rest.issues.createComment({
+            owner: context.repo.owner,
+            repo: context.repo.repo,
+            issue_number: process.env.PR_NUMBER,
+            body: body.split('\n').map(line => line.trim()).join('\n'),
+          });
+
+    - name: Fail if conflicts found
+      if: steps.check-release.outputs.has-conflicts == 'true'
+      shell: bash
+      run: |
+        exit 1

.github/workflows/main.yml

@@ -67,6 +67,9 @@ jobs:
     name: Check release
     needs: check-workflows
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v5