Update Vendor #1374
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Update Vendor | |
| on: | |
| workflow_dispatch: | |
| schedule: | |
| # At 13:37 UTC every day. | |
| - cron: '37 13 * * *' | |
| concurrency: | |
| group: vendor-update | |
| cancel-in-progress: false | |
| env: | |
| # Fork owners can opt in by setting this Actions repository variable to true. | |
| AUTO_MERGE_MINOR_VENDOR_UPDATES: ${{ vars.AUTO_MERGE_MINOR_VENDOR_UPDATES || 'false' }} | |
| defaults: | |
| run: | |
| shell: pwsh | |
| permissions: | |
| contents: read | |
| jobs: | |
| vendor: | |
| runs-on: windows-latest | |
| continue-on-error: false | |
| timeout-minutes: 15 | |
| permissions: | |
| contents: write | |
| pull-requests: write | |
| steps: | |
| - uses: actions/checkout@v6 | |
| with: | |
| fetch-depth: 0 | |
| - name: Configure auto-merge policy | |
| shell: pwsh | |
| run: | | |
| $rawValue = [string]$env:AUTO_MERGE_MINOR_VENDOR_UPDATES | |
| $normalizedValue = $rawValue.Trim().ToLowerInvariant() | |
| $enabled = $normalizedValue -in @('true', '1', 'yes', 'on') | |
| if ($enabled) { | |
| Add-Content -Path $env:GITHUB_ENV -Value "AUTO_MERGE_MINOR_VENDOR_UPDATES_ENABLED=True" | |
| } else { | |
| Add-Content -Path $env:GITHUB_ENV -Value "AUTO_MERGE_MINOR_VENDOR_UPDATES_ENABLED=False" | |
| } | |
| - name: Summary - Workflow started | |
| shell: pwsh | |
| run: | | |
| $summary = @" | |
| ## 📦 Update Vendor - Workflow Summary | |
| Checking for vendor dependency updates... | |
| "@ | |
| $summary | Add-Content -Path $env:GITHUB_STEP_SUMMARY -Encoding utf8 | |
| - id: make-changes | |
| name: Checking for updates | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: | | |
| $currentVersion = (Get-Content -Raw .\vendor\sources.json | ConvertFrom-Json) | |
| . .\scripts\update.ps1 -verbose | |
| # Export count of updated packages (update.ps1 is expected to set $count) | |
| if (-not ($count)) { $count = 0 } | |
| Set-GHVariable -Name COUNT_UPDATED -Value $count | |
| $newVersion = (Get-Content -Raw .\vendor\sources.json | ConvertFrom-Json) | |
| # Source utility functions | |
| . scripts/utils.ps1 | |
| $listUpdated = "" | |
| $updateMessage = "| Name | Old Version | New Version |`n| :--- | :---: | :---: |`n" | |
| $majorUpdates = @() | |
| $singleDepName = "" | |
| $singleDepOldVersion = "" | |
| $singleDepNewVersion = "" | |
| foreach ($s in $newVersion) { | |
| $oldVersion = ($currentVersion | Where-Object {$_.name -eq $s.name}).version | |
| if ($s.version -ne $oldVersion) { | |
| $repoUrl = ($repoUrl = $s.Url.Replace("/archive/", "/releases/")).Substring(0, $repoUrl.IndexOf("/releases/")) + "/releases" | |
| # Store single dependency info for messages (only if this is the only update) | |
| if ($count -eq 1) { | |
| $singleDepName = $s.name | |
| $singleDepOldVersion = $oldVersion | |
| $singleDepNewVersion = $s.version | |
| } | |
| # Determine change type and emoji using shared function | |
| $result = Get-VersionChangeType -OldVersion $oldVersion -NewVersion $s.version | |
| $changeType = $result.ChangeType | |
| $emoji = $result.Emoji | |
| $isMajor = $result.IsMajor | |
| # Track major updates for changelog section | |
| if ($isMajor) { | |
| $compareUrl = "$repoUrl/compare/v$oldVersion...v$($s.version)" | |
| $majorUpdates += @{ | |
| name = $s.name | |
| oldVersion = $oldVersion | |
| newVersion = $s.version | |
| compareUrl = $compareUrl | |
| repoUrl = $repoUrl | |
| } | |
| } | |
| $listUpdated += "$($s.name) v$($s.version), " | |
| $updateMessage += "| $emoji **[$($s.name)]($repoUrl)** | ``$oldVersion`` | **``$($s.version)``** |`n" | |
| } | |
| } | |
| if ($count -eq 0) { return } | |
| Set-GHVariable -Name LIST_UPDATED -Value $listUpdated.Trim(', ') | |
| # Set single dependency variables (they will only be used if COUNT_UPDATED is 1) | |
| # Use safe fallback values in case variables weren't set (shouldn't happen but prevents errors) | |
| if ([string]::IsNullOrEmpty($singleDepName) -and $count -eq 1) { | |
| # This shouldn't happen, but if it does, log a warning | |
| Write-Warning "Single dependency name not set despite count being 1" | |
| $singleDepName = "unknown-package" | |
| $singleDepOldVersion = "unknown" | |
| $singleDepNewVersion = "unknown" | |
| } elseif ([string]::IsNullOrEmpty($singleDepName)) { | |
| # For multiple dependencies, set placeholder values (won't be used) | |
| $singleDepName = "" | |
| $singleDepOldVersion = "" | |
| $singleDepNewVersion = "" | |
| } | |
| Set-GHVariable -Name SINGLE_DEP_NAME -Value $singleDepName | |
| Set-GHVariable -Name SINGLE_DEP_OLD_VERSION -Value $singleDepOldVersion | |
| Set-GHVariable -Name SINGLE_DEP_NEW_VERSION -Value $singleDepNewVersion | |
| # Write multiline UPDATE_MESSAGE to GITHUB_ENV | |
| ## echo "UPDATE_MESSAGE<<EOF`n$updateMessage`nEOF" | Out-File -FilePath $env:GITHUB_ENV -Append -Encoding utf8 | |
| Add-Content -Path $env:GITHUB_ENV -Value "UPDATE_MESSAGE<<EOF" | |
| Add-Content -Path $env:GITHUB_ENV -Value $updateMessage | |
| Add-Content -Path $env:GITHUB_ENV -Value "EOF" | |
| # Generate major updates changelog section and export | |
| if ($majorUpdates.Count -gt 0) { | |
| $changelogSection = "`n<details>`n<summary>🔥 Major version updates - View changelog</summary>`n`n" | |
| foreach ($update in $majorUpdates) { | |
| $changelogSection += "### [$($update.name)]($($update.repoUrl))`n" | |
| $changelogSection += "**$($update.oldVersion)** → **$($update.newVersion)**`n`n" | |
| $changelogSection += "- [View full changelog]($($update.compareUrl))`n" | |
| $changelogSection += "- [Release notes]($($update.repoUrl)/tag/v$($update.newVersion))`n`n" | |
| } | |
| $changelogSection += "</details>`n" | |
| Add-Content -Path $env:GITHUB_ENV -Value "CHANGELOG_SECTION<<EOF" | |
| Add-Content -Path $env:GITHUB_ENV -Value $changelogSection | |
| Add-Content -Path $env:GITHUB_ENV -Value "EOF" | |
| Add-Content -Path $env:GITHUB_ENV -Value "HAS_BREAKING_CHANGES=True" | |
| } else { | |
| Add-Content -Path $env:GITHUB_ENV -Value "CHANGELOG_SECTION=" | |
| Add-Content -Path $env:GITHUB_ENV -Value "HAS_BREAKING_CHANGES=False" | |
| } | |
| - name: Summary - Update check results | |
| shell: pwsh | |
| run: | | |
| $count = [int]$env:COUNT_UPDATED | |
| if ($count -eq 0) { | |
| $summary = "### ✅ No Updates Available`n`nAll vendor dependencies are up to date! 🎉`n" | |
| } else { | |
| $word = if ($count -eq 1) { 'dependency' } else { 'dependencies' } | |
| $summary = "### 🔄 Updates Found`n`n" | |
| if ($count -eq 1) { | |
| $summary += '📦 **' + $env:SINGLE_DEP_NAME + '** updated from `' + $env:SINGLE_DEP_OLD_VERSION + '` to `' + $env:SINGLE_DEP_NEW_VERSION + '`' + "`n" + "`n" | |
| } else { | |
| $summary += '📦 **' + $count + '** vendor ' + $word + ' updated:' + "`n" + "`n" | |
| } | |
| } | |
| $summary += $env:UPDATE_MESSAGE + "`n" | |
| # Check if we can auto-merge (only minor/patch changes, opt-in only). | |
| $hasBreaking = $env:HAS_BREAKING_CHANGES -eq 'True' | |
| $autoMergeEnabled = $env:AUTO_MERGE_MINOR_VENDOR_UPDATES_ENABLED -eq 'True' | |
| if ($hasBreaking) { | |
| $summary += '> ⚠️ **Note:** This update contains major version changes that may include breaking changes.' | |
| } elseif ($autoMergeEnabled) { | |
| $summary += '> ℹ️ **Note:** This update only contains minor or patch changes, and auto-merge is enabled.' | |
| } else { | |
| $summary += '> ℹ️ **Note:** This update only contains minor or patch changes. Auto-merge is disabled by default; set the `AUTO_MERGE_MINOR_VENDOR_UPDATES` Actions repository variable to `true` to opt in.' | |
| } | |
| $summary | Add-Content -Path $env:GITHUB_STEP_SUMMARY -Encoding utf8 | |
| - name: Auto-merge minor updates | |
| if: env.COUNT_UPDATED > 0 && env.HAS_BREAKING_CHANGES != 'True' && env.AUTO_MERGE_MINOR_VENDOR_UPDATES_ENABLED == 'True' | |
| shell: pwsh | |
| run: | | |
| function Get-PushFailureReason { | |
| param( | |
| [string[]]$PushOutput | |
| ) | |
| $text = ($PushOutput -join "`n").Trim() | |
| if ([string]::IsNullOrWhiteSpace($text)) { | |
| return "Git rejected the push to `master`." | |
| } | |
| if ($text -match 'GH006: Protected branch' -or $text -match 'protected branch hook declined') { | |
| return "GitHub rejected the push because `master` is protected and direct pushes are blocked." | |
| } | |
| if ($text -match 'non-fast-forward|fetch first|failed to push some refs') { | |
| return "The remote branch moved ahead of the local commit, so the push was rejected as non-fast-forward." | |
| } | |
| if ($text -match 'not authorized|permission denied|write access') { | |
| return "The workflow token does not have permission to push to `master`." | |
| } | |
| return (($text -split "`r?`n" | Where-Object { $_ -match '^(remote:|! \[remote rejected\]|error:|To )' } | Select-Object -First 4) -join '; ') | |
| } | |
| try { | |
| echo "### 🚀 Auto-merging Updates" >> $env:GITHUB_STEP_SUMMARY | |
| echo "" >> $env:GITHUB_STEP_SUMMARY | |
| echo "Attempting to automatically merge non-breaking changes to master..." >> $env:GITHUB_STEP_SUMMARY | |
| git config --global user.name "github-actions[bot]" | |
| git config --global user.email "github-actions[bot]@users.noreply.github.com" | |
| # Commit the changes | |
| git add vendor/sources.json | |
| $commitResult = git commit -m "⬆️ Update dependencies ($env:LIST_UPDATED)" | |
| $commitSuccess = $LASTEXITCODE -eq 0 | |
| if ($commitSuccess) { | |
| # Push directly to master | |
| $pushOutput = & git push origin HEAD:master 2>&1 | |
| $pushSuccess = $LASTEXITCODE -eq 0 | |
| if (-not $pushSuccess) { | |
| $pushFailureReason = Get-PushFailureReason -PushOutput @($pushOutput) | |
| if (-not [string]::IsNullOrWhiteSpace($pushFailureReason)) { | |
| Add-Content -Path $env:GITHUB_ENV -Value "AUTO_MERGE_FAILURE_REASON=$pushFailureReason" | |
| } | |
| $pushErrorMessage = if ([string]::IsNullOrWhiteSpace($pushFailureReason)) { | |
| "Failed to push to master (exit code: $LASTEXITCODE)" | |
| } else { | |
| "Failed to push to master (exit code: $LASTEXITCODE): $pushFailureReason" | |
| } | |
| } | |
| if ($pushSuccess) { | |
| echo "" >> $env:GITHUB_STEP_SUMMARY | |
| echo "✅ **Success!** Updates have been automatically merged to master." >> $env:GITHUB_STEP_SUMMARY | |
| echo "" >> $env:GITHUB_STEP_SUMMARY | |
| echo "**Updated dependencies:** $env:LIST_UPDATED" >> $env:GITHUB_STEP_SUMMARY | |
| # Set a flag to skip PR creation | |
| echo "AUTO_MERGED=true" | Out-File -FilePath $env:GITHUB_ENV -Append -Encoding utf8 | |
| } else { | |
| throw $pushErrorMessage | |
| } | |
| } else { | |
| throw "Failed to commit changes (exit code: $LASTEXITCODE)" | |
| } | |
| } catch { | |
| echo "" >> $env:GITHUB_STEP_SUMMARY | |
| echo "⚠️ **Warning:** Unable to automatically merge updates." >> $env:GITHUB_STEP_SUMMARY | |
| echo "" >> $env:GITHUB_STEP_SUMMARY | |
| echo "**Error:** $($_.Exception.Message)" >> $env:GITHUB_STEP_SUMMARY | |
| echo "" >> $env:GITHUB_STEP_SUMMARY | |
| echo "Falling back to creating a pull request..." >> $env:GITHUB_STEP_SUMMARY | |
| Write-Warning "Failed to auto-merge: $($_.Exception.Message)" | |
| # Set flag to create PR instead | |
| echo "AUTO_MERGED=false" | Out-File -FilePath $env:GITHUB_ENV -Append -Encoding utf8 | |
| $global:LASTEXITCODE = 0 | |
| exit 0 | |
| } | |
| - id: create-pr | |
| uses: peter-evans/create-pull-request@v8 | |
| if: fromJSON(env.COUNT_UPDATED) > 0 && env.AUTO_MERGED != 'true' | |
| with: | |
| title: ${{ env.COUNT_UPDATED == 1 && format('⬆️ Update {0}', env.LIST_UPDATED) || format('⬆️ Update {0} vendored dependencies', env.COUNT_UPDATED) }} | |
| body: | | |
| ### ${{ env.COUNT_UPDATED == 1 && format('📦 Updated {0} from `{1}` to `{2}`', env.SINGLE_DEP_NAME, env.SINGLE_DEP_OLD_VERSION, env.SINGLE_DEP_NEW_VERSION) || format('📦 Automatically updated `{0}` dependencies', env.COUNT_UPDATED) }} | |
| ${{ env.UPDATE_MESSAGE }} | |
| ${{ env.CHANGELOG_SECTION }} | |
| --- | |
| ${{ env.HAS_BREAKING_CHANGES == 'True' && '⚠️ **This update contains major version changes that may include breaking changes.**' || 'ℹ️ This update only contains minor or patch changes.' }} | |
| Please verify and then **Merge** the pull request to apply the updates. | |
| commit-message: '⬆️ Update dependencies (${{ env.LIST_UPDATED }})' | |
| branch: update-vendor | |
| base: master | |
| - name: Summary - Pull request result | |
| if: env.COUNT_UPDATED > 0 && env.AUTO_MERGED != 'true' | |
| shell: pwsh | |
| env: | |
| PR_URL: ${{ steps.create-pr.outputs.pull-request-url }} | |
| PR_NUMBER: ${{ steps.create-pr.outputs.pull-request-number }} | |
| PR_OPERATION: ${{ steps.create-pr.outputs.pull-request-operation }} | |
| AUTO_MERGE_FAILURE_REASON: ${{ env.AUTO_MERGE_FAILURE_REASON }} | |
| AUTO_MERGE_MINOR_VENDOR_UPDATES_ENABLED: ${{ env.AUTO_MERGE_MINOR_VENDOR_UPDATES_ENABLED }} | |
| run: | | |
| $updateVendorBranchUrl = "$($env:GITHUB_SERVER_URL)/$($env:GITHUB_REPOSITORY)/tree/update-vendor" | |
| $summary = @" | |
| ### 🎉 Pull Request Result | |
| **Branch:** [``update-vendor``]($updateVendorBranchUrl) | |
| $(if (-not [string]::IsNullOrEmpty($env:LIST_UPDATED)) { "**Updated dependencies:** $env:LIST_UPDATED" } else { "**Updated dependencies:** " }) | |
| "@ | |
| switch ($env:PR_OPERATION) { | |
| 'created' { | |
| $summary += "A new pull request has been created: [#$($env:PR_NUMBER)]($($env:PR_URL))`n`n" | |
| } | |
| 'updated' { | |
| $summary += "An existing pull request has been updated: [#$($env:PR_NUMBER)]($($env:PR_URL))`n`n" | |
| } | |
| 'none' { | |
| $summary += "No pull request was created because [update-vendor]($updateVendorBranchUrl) no longer differs from ``master``.`n`n" | |
| } | |
| default { | |
| if (-not [string]::IsNullOrWhiteSpace($env:PR_URL)) { | |
| $summary += "A pull request was reported, but the operation type was not recognized: [#$($env:PR_NUMBER)]($($env:PR_URL))`n`n" | |
| } else { | |
| $summary += "A pull request was requested, but no PR link was returned.`n`n" | |
| } | |
| } | |
| } | |
| if (-not [string]::IsNullOrWhiteSpace($env:AUTO_MERGE_FAILURE_REASON)) { | |
| $summary += "> ⚠️ **Auto-merge failure:** $env:AUTO_MERGE_FAILURE_REASON`n`n" | |
| } | |
| if ($env:HAS_BREAKING_CHANGES -eq 'True') { | |
| $summary += "> ⚠️ **Manual review required:** This update contains major version changes." | |
| } elseif ($env:PR_OPERATION -eq 'none') { | |
| $summary += "> ℹ️ **Note:** No pull request was created because there were no differences left to propose." | |
| } elseif ($env:AUTO_MERGE_MINOR_VENDOR_UPDATES_ENABLED -ne 'True') { | |
| $summary += "> ℹ️ **Note:** Auto-merge is disabled by configuration. Set the ``AUTO_MERGE_MINOR_VENDOR_UPDATES`` Actions repository variable to ``true`` to opt in." | |
| } else { | |
| $summary += "> ℹ️ **Note:** Auto-merge failed, manual review required." | |
| } | |
| $summary += "`n> Please review and merge the pull request to apply the updates.`n`n" | |
| $summary | Add-Content -Path $env:GITHUB_STEP_SUMMARY -Encoding utf8 |