update.yaml

name: update

on:
  workflow_dispatch:
  schedule:
    - cron: "0 * * * *"

jobs:
  update-flux:
    runs-on: ubuntu-latest
    steps:
      - name: Check out code
        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
      - name: Setup Go
        uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
        with:
          go-version-file: 'go.mod'
          cache: true
      - name: Setup Flux CLI
        uses: fluxcd/flux2/action@main
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
      - name: Update component versions
        id: update
        run: |
          RELEASE_VERSION=$(flux version --client | awk '{print $2}')
          CURRENT_VERSION=$(go list -m all | grep github.com/fluxcd/flux2 | awk '{print $2}')
          if [[ "${RELEASE_VERSION}" != "${CURRENT_VERSION}" ]]; then
            go mod edit -require github.com/fluxcd/flux2/v2@${RELEASE_VERSION}
            go mod tidy -compat=1.20
          fi
          git diff

          PR_TITLE="Update Flux to ${RELEASE_VERSION}"
          PR_BODY=$(mktemp)
          echo "- github.com/fluxcd/flux2 to ${RELEASE_VERSION}" >> $PR_BODY
          echo "  https://github.com/fluxcd/flux2/releases/${RELEASE_VERSION}" >> $PR_BODY

          # NB: this may look strange but it is the way it should be done to
          # maintain our precious newlines
          # Ref: https://github.com/github/docs/issues/21529
          echo 'pr_body<<EOF' >> $GITHUB_OUTPUT
          cat $PR_BODY >> $GITHUB_OUTPUT
          echo 'EOF' >> $GITHUB_OUTPUT
          echo "pr_title=$PR_TITLE" >> $GITHUB_OUTPUT
      - name: Create Pull Request
        id: cpr
        uses: peter-evans/create-pull-request@9153d834b60caba6d51c9b9510b087acf9f33f83 # v6.0.4
        with:
            token: ${{ secrets.BOT_GITHUB_TOKEN }}
            commit-message: |
              ${{ steps.update.outputs.pr_title }}

              ${{ steps.update.outputs.pr_body }}
            committer: GitHub <noreply@github.com>
            author: fluxcdbot <fluxcdbot@users.noreply.github.com>
            signoff: true
            title: ${{ steps.update.outputs.pr_title }}
            body: |
              ${{ steps.update.outputs.pr_body }}
            branch: update-components
            labels: |
              area/build
            reviewers: ${{ secrets.ASSIGNEES }}
      - name: Check output
        run: |
          echo "Pull Request Number - ${{ steps.cpr.outputs.pull-request-number }}"