update.yaml

name: "Check for updates"

on:
  pull_request:
    branches:
      - "main"

  workflow_dispatch:
  schedule:
    # Run every day at midnight, https://crontab.guru/#@daily.
    - cron: "0 0 * * *"

# Ensure updates only run once at a time.
concurrency:
  group: "updater-${{ github.repository }}-${{ github.ref }}"

jobs:
  # Temporary job to update the www-client/chromium package until the
  # updater supports periodic jobs (if ever?)
  update-chromium:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: jdx/mise-action@v2
        with:
          experimental: true
      - name: Setup Environment
        working-directory: .tools
        run: mise run build
      - name: Sync chromium with upstream
        working-directory: www-client/chromium
        run: ./.update.sh
      - uses: jaredallard/ghcommit-action@v0.1.7
        if: github.event_name != 'pull_request'
        with:
          commit_message: "www-client/chromium: sync with upstream"
          repo: ${{ github.repository }}
          branch: "main"
        env:
          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
  updater:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: jdx/mise-action@v2
        with:
          experimental: true
      - name: Setup Environment
        working-directory: .tools
        run: |-
          mise run build
          docker pull ghcr.io/jaredallard/overlay:updater
      - name: Run updater
        env:
          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
        run: mise run update
      - name: Run linter
        run: mise run lint
      - uses: jaredallard/ghcommit-action@v0.1.7
        if: github.event_name != 'pull_request'
        with:
          commit_message: "chore: update dependencies"
          repo: ${{ github.repository }}
          branch: "main"
        env:
          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}