chore(ora): wire Oracle into publish-release.yml + add publish job

oracle.yml had test and deploy-internal jobs but no publish job, so
even when invoked via workflow_call from publish-release.yml nothing
would upload the package to GCS. publish-release.yml itself never
dispatched Oracle either — no change_ora output, no oracle filter, no
publish-ora job. Result: the Oracle release zip was never published.

Add the missing pieces, modeled on Databricks's publish (closest peer
among newer clouds) plus the node+yarn setup Oracle needs to bundle
its MLE-JS libraries during create-package. No Python/virtualenv —
the Oracle create-package chain is pure node (rollup + build_modules.js).

Package destinations:
  gs://carto-analytics-toolbox-core/oracle/carto-analytics-toolbox-core-oracle-<version>.zip
  gs://carto-analytics-toolbox-core/oracle/carto-analytics-toolbox-core-oracle-latest.zip
  gs://carto-analytics-toolbox-core/oracle/metadata.json

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: vdelacruzb

.github/workflows/oracle.yml

@@ -156,3 +156,41 @@ jobs:
         run: |
           cd clouds/oracle
           make deploy production=1
+
+  publish:
+    if: github.ref_name == 'stable'
+    needs: test
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    env:
+      PACKAGE_BUCKET: gs://carto-analytics-toolbox-core/oracle
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v2
+      - name: Setup node
+        uses: actions/setup-node@v1
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+      - name: Setup yarn
+        run: npm install -g yarn
+      - name: Auth google
+        uses: google-github-actions/auth@v2
+        with:
+          credentials_json: ${{ secrets.GCLOUD_PRODUCTION_RELEASE_SA }}
+          project_id: ${{ secrets.GCLOUD_PRODUCTION_PROJECT }}
+          create_credentials_file: true
+      - name: Setup gcloud
+        uses: google-github-actions/setup-gcloud@v2
+        with:
+            version: ${{ env.GCLOUD_VERSION }}
+            project_id: ${{ secrets.GCLOUD_PRODUCTION_PROJECT }}
+      - name: Create package
+        run: |
+          cd clouds/oracle
+          make create-package
+      - name: Publish package
+        run: |
+          cd clouds/oracle
+          gsutil -h "Content-Type:application/zip" -m cp dist/*.zip ${{ env.PACKAGE_BUCKET }}/
+          gsutil -h "Content-Type:application/zip" -m cp dist/*.zip ${{ env.PACKAGE_BUCKET }}/carto-analytics-toolbox-core-oracle-latest.zip
+          gsutil -h "Content-Type:application/json" -m cp dist/*.json ${{ env.PACKAGE_BUCKET }}/

.github/workflows/publish-release.yml

@@ -14,6 +14,7 @@ jobs:
     outputs:
       change_bq: ${{ steps.changes.outputs.bigquery }}
       change_db: ${{ steps.changes.outputs.databricks }}
+      change_ora: ${{ steps.changes.outputs.oracle }}
       change_pg: ${{ steps.changes.outputs.postgres }}
       change_rs: ${{ steps.changes.outputs.redshift }}
       change_sf: ${{ steps.changes.outputs.snowflake }}
@@ -44,6 +45,8 @@ jobs:
               - 'clouds/bigquery/version'
             databricks:
               - 'clouds/databricks/version'
+            oracle:
+              - 'clouds/oracle/version'
             postgres:
               - 'clouds/postgres/version'
             redshift:
@@ -55,6 +58,7 @@ jobs:
         run: |
           BQ_VERSION=$(cat clouds/bigquery/version)
           DB_VERSION=$(cat clouds/databricks/version)
+          ORA_VERSION=$(cat clouds/oracle/version)
           PG_VERSION=$(cat clouds/postgres/version)
           RS_VERSION=$(cat clouds/redshift/version)
           SF_VERSION=$(cat clouds/snowflake/version)
@@ -65,6 +69,9 @@ jobs:
           if [[ ${{ steps.changes.outputs.databricks }} = "true" ]]; then
             RELEASE_BODY+="\n- Databricks release version $DB_VERSION - [CHANGELOG](https://github.com/${{ github.repository }}/blob/stable/clouds/databricks/CHANGELOG.md)"
           fi
+          if [[ ${{ steps.changes.outputs.oracle }} = "true" ]]; then
+            RELEASE_BODY+="\n- Oracle release version $ORA_VERSION - [CHANGELOG](https://github.com/${{ github.repository }}/blob/stable/clouds/oracle/CHANGELOG.md)"
+          fi
           if [[ ${{ steps.changes.outputs.postgres }} = "true" ]]; then
             RELEASE_BODY+="\n- Postgres release version $PG_VERSION - [CHANGELOG](https://github.com/${{ github.repository }}/blob/stable/clouds/postgres/CHANGELOG.md)"
           fi
@@ -111,6 +118,13 @@ jobs:
     uses: CartoDB/analytics-toolbox-core/.github/workflows/bigquery.yml@stable
     secrets: inherit
 
+  publish-ora:
+    needs: release
+    if: needs.release.outputs.change_ora == 'true'
+    name: "Publish AT for Oracle"
+    uses: CartoDB/analytics-toolbox-core/.github/workflows/oracle.yml@stable
+    secrets: inherit
+
   publish-pg:
     needs: release
     if: needs.release.outputs.change_pg == 'true'