[zep noup] doc: add document to explain how version bumping should be handled

This commit introduces a document which describes how version bumping to
upstream Mbed TLS' releases should be handled in the Zephyr's fork of
Mbed TLS.

Signed-off-by: Valerio Setti <vsetti@baylibre.com>

Author: valeriosetti

version-bumping.md

@@ -0,0 +1,40 @@
+Scope of this document
+======================
+
+This document talks about Mbed TLS, but the same guidelines apply to
+the other forks of the TF-M and Mbed TLS projects.
+
+Upstream Mbed TLS branches and tags
+===================================
+
+- 1 working branch name named `development`, where the ongoing work happens.
+- 1 or more LTS branches named as `mbedtls-<major>.<minor>` (ex: `mbedtls-3.6`).
+- Tag at every release with format `v<major>.<minor>.<patch>` (ex: `v3.6.4`).
+
+Proposed approach
+=================
+
+Let's say that a new Mbed TLS release is announced and that its release tag
+is for example `v3.6.5`.
+On the Zephyr fork:
+1. Create a new branch named `zephyr_<project_name>_v<upstream_release_version>`
+   which is located exactly at the upstream release tag. For example
+   `zephyr_mbedtls_v3.6.5`.
+2. Make a PR by cherry-picking all the Zephyr extra patches that are still needed
+   for the new branch [1][2].
+   - Discard all the `[zep fromtree]`and `[zep fromlist]` that are already
+      included in the release. As for `[zep noup]` they might no more be valid
+      or might require an update so they should be checked individually.
+   - The cherry-picking order should be: `[zep fromtree]` first, then
+       `[zep fromlist]` and finally `[zep noup]`.
+   - Cherry-pick commits without `-x` nor `-s` so as not to inflate the commit
+     message over time.
+3. For the created PR set the target merge branch to the newly created
+   `zephyr_mbedtls_v3.6.5`.
+   - With this approach the PR in GitHub will show only Zephyr extra commits
+     on top of the upstream release tag, so it will be easier to review.
+4. Get the PR approved and merged.
+5. Set the repo default branch to `zephyr_mbedtls_v3.6.5`.
+   - When this is done, previous default branch (which in our example would be
+     `zephyr_mbedtls_v3.6.4`) is cancelled and replaced with a tag in order to
+     keep its history.