Create a git tag for every release (#10811)

.github/workflows/release.yml

@@ -100,6 +100,8 @@ jobs:
 
   release-npm:
     needs: [setup]
+    outputs:
+      release_version: ${{ steps.set-version.outputs.release_version }}
     timeout-minutes: 30
     if: github.event.pull_request.merged == true || github.ref_name == 'master' || github.ref_name == 'master-patch-*'
     runs-on: ubuntu-latest
@@ -121,6 +123,7 @@ jobs:
           dry-run-flag: ${{ inputs.dry-run-flag }}
       - uses: ./.github/actions/download-node-modules-and-artifacts
       - name: Set libraries versions
+        id: set-version
         run: |
           set -u;
           ./scripts/github/build/bumpversion.sh
@@ -154,6 +157,21 @@ jobs:
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_REGISTRY_TOKEN }}
 
+  create-git-tag:
+    runs-on: ubuntu-latest
+    needs: [setup, release-npm]
+    name: Create github tag
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          fetch-depth: 1
+      - uses: './.github/actions/create-git-tag'
+        with:
+          tagName: ${{ needs.release-npm.outputs.release_version }}
+
   propagate:
     needs: [release-npm]
     if: ${{ contains(toJson(github.event.pull_request.labels.*.name), 'hxp-upstream') }}