cache-cleanup.yaml

---
name: Cache Cleanup
'on':
  pull_request:
    types: [closed]
  schedule:
    - cron: '0 0 * * *'
  workflow_dispatch:

jobs:
  renovate-cache-cleanup:
    name: Renovate Cache Cleanup
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        name: Install `gh-actions-cache` CLI extension
        run: gh extension install actions/gh-actions-cache

      - id: cache-info
        name: Get information for cache cleanup
        env:
          BRANCH: >-
            ${{
              github.event_name == 'pull_request' && github.event.pull_request.merged && format('refs/pull/{0}/merge', github.event.pull_request.number)
              || github.event_name != 'pull_request' && github.ref
              || ''
            }}
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          KEY: ${{ github.repository_owner }}-renovate-cache-
        run: |
          echo "branch=$BRANCH" >> $GITHUB_OUTPUT
          if [ -n "$BRANCH" ]; then
            # Get cache keys that don't include the branch's SHA (if not a PR)
            gh actions-cache list -R ${{ github.repository }} -B $BRANCH -L 100 --key $KEY --order asc --sort last-used | cut -f 1 > cache-keys.txt
            [ -z "${{ github.event.pull_request }}" ] && grep -v ${{ github.sha }} cache-keys.txt > cache-keys.txt.tmp && mv cache-keys.txt.tmp cache-keys.txt
            echo cache-keys="$(cat cache-keys.txt | tr '\n' ' ')" >> $GITHUB_OUTPUT
          fi

      - env:
          CACHE_KEYS: ${{ steps.cache-info.outputs.cache-keys }}
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        if: ${{ steps.cache-info.outputs.branch != '' }}
        name: Delete stale cache entries from ${{ steps.cache-info.outputs.branch }}
        run: |
          set +e
          for key in $CACHE_KEYS; do
            gh actions-cache delete $key -R ${{ github.repository }} -B ${{ steps.cache-info.outputs.branch }} --confirm
          done