chore(ci): add ngx_wasm_module bump workflow #9
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Update ngx_wasm_module dependency | |
| #description: > | |
| # This workflow updates the NGX_WASM_MODULE dependency in .requirements to the | |
| # latest HEAD from Kong/ngx_wasm_module and opens a PR for it. It is designed | |
| # to run periodically or on-demand. | |
| on: | |
| schedule: | |
| # run weekly | |
| - cron: '0 0 * * 0' | |
| workflow_dispatch: | |
| pull_request: | |
| jobs: | |
| update: | |
| runs-on: ubuntu-22.04 | |
| permissions: | |
| # required to create a branch and push commits | |
| contents: write | |
| # required to open a PR for updates | |
| pull-requests: write | |
| steps: | |
| - name: Checkout Kong source code | |
| uses: actions/checkout@v4 | |
| - name: Detect current version of NGX_WASM_MODULE in .requirements | |
| id: check-kong | |
| run: | | |
| SHA=$(sed -nre 's/^NGX_WASM_MODULE=([^ ]+) .*/\1/p' < .requirements) | |
| echo "sha=$SHA" | tee -a "$GITHUB_OUTPUT" | |
| - name: Check Kong/ngx_wasm_module HEAD | |
| id: check-repo | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: | | |
| SHA=$(gh api repos/Kong/ngx_wasm_module/commits/main | jq -r .sha) | |
| echo "sha=$SHA" | tee -a "$GITHUB_OUTPUT" | |
| - name: Update .requirements and create a pull request | |
| if: steps.check-kong.outputs.sha != steps.check-repo.outputs.sha | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: | | |
| set -x | |
| gh auth status | |
| gh auth setup-git | |
| git config --global user.email "noreply@github.com" | |
| git config --global user.name "GitHub Actions" | |
| readonly BRANCH=chore/deps-bump-ngx-wasm-module | |
| git switch --create "$BRANCH" | |
| sed -i \ | |
| -re 's/^NGX_WASM_MODULE=.*/NGX_WASM_MODULE=${{ steps.check-repo.outputs.sha }}/' \ | |
| .requirements | |
| git add .requirements | |
| git commit \ | |
| -m 'chore(deps): bump NGX_WASM_MODULE to ${{ steps.check-repo.outputs.sha }}' | |
| # TODO: handle branch-already-exists | |
| git push origin HEAD | |
| # TODO: handle PR-already-exists | |
| gh pr create \ | |
| --base master \ | |
| --head "$BRANCH" \ | |
| --fill |