sync-upstream.yml

name: Sync upstream

on:
  schedule:
    - cron: '54 3 * * 0' # every Sunday at 03:54
  workflow_dispatch:

jobs:
  sync-upstream:
    name: 'Sync upstream'
    runs-on: elvia-runner
    permissions:
      contents: write
    env:
      BASE_BRANCH: 'trunk'
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          ref: ${{ env.BASE_BRANCH }}

      - name: Setup Go
        uses: actions/setup-go@v5

      - name: Setup Packer
        uses: hashicorp/setup-packer@v3

      - name: Run update script
        run: go run main.go
        env:
          ACCEPT_ALL: 'true'

      - name: Get GitHub App token for repository
        uses: actions/create-github-app-token@v1
        id: app-token
        with:
          app-id: ${{ vars.GH_APP_ID }}
          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}

      - name: Commit changes and set branch name
        run: |
          if [[ -z "$(git status --porcelain)" ]]; then
            echo 'No changes to commit.'
            echo "GIT_CHANGES=false" >> $GITHUB_ENV
            exit 0
          fi

          branch_name="chore/update-runner-image-$(date +%s)"
          echo "BRANCH_NAME=$branch_name" >> $GITHUB_ENV

          git config user.email '${{ vars.GH_APP_USER_EMAIL }}'
          git config user.name '${{ vars.GH_APP_USERNAME }}'

          git checkout -b "$branch_name"
          git add .
          git commit -m 'Update runner image'
          git push -u origin "$branch_name"

      - name: Create pull request
        uses: actions/github-script@v7
        if: ${{ env.GIT_CHANGES != 'false' }}
        with:
          github-token: ${{ steps.app-token.outputs.token }}
          script: |
            const { owner, repo } = context.repo;
            const title = '⬆️ Runner image update';

            const body = `## ${title}

            This pull request updates the Packer configuration to the latest commit from [runner-images](https://github.com/actions/runner-images).

            It should be automatically merged by **${{ vars.GH_APP_USERNAME }}** once the integration tests pass.
            `;

            const { data: pullRequest } = await github.rest.pulls.create({
              owner,
              repo,
              title,
              head: '${{ env.BRANCH_NAME }}',
              base: 'trunk',
              body,
            })

            console.log(`Created pull request: ${pullRequest.html_url}`)