ci: merge release-pinback and release-please workflows

2026-06-08 19:46:41 +00:00 · 2026-04-28 09:49:40 -04:00
parent ef5e69859c
commit b90317db60
2 changed files with 83 additions and 77 deletions
@@ -1,75 +0,0 @@
-name: Pinback Release Refs
-
-on:
-  push:
-    tags:
-      - 'v*'
-  workflow_dispatch:
-
-jobs:
-  pinback:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-    steps:
-      - uses: actions/checkout@v6
-        with:
-          ref: main
-          token: ${{ secrets.GRAYBOT_PIN_BACK_PAT }}
-
-      - name: Extract version
-        id: version
-        run: |
-          VERSION="v$(jq -r '."."' .release-please-manifest.json)"
-          echo "VERSION=${VERSION}" >> $GITHUB_OUTPUT
-
-      - name: Restore @main refs
-        run: |
-          sed -i "s|uses: graycoreio/github-actions-magento2/\([^@]*\)@[^ #]*|uses: graycoreio/github-actions-magento2/\1@main|g" \
-            */action.yml \
-            $(find .github/workflows \( -name "*.yml" -o -name "*.yaml" \) ! -name "release-pinback.yml")
-
-      - name: Show changed files
-        run: git diff
-
-      - name: Check for local changes
-        id: local-changes
-        run: |
-          if git diff --quiet --exit-code; then
-            echo "HAS_LOCAL_CHANGES=false" >> $GITHUB_OUTPUT
-          else
-            echo "HAS_LOCAL_CHANGES=true" >> $GITHUB_OUTPUT
-          fi
-
-      - name: Commit changes
-        if: ${{ steps.local-changes.outputs.HAS_LOCAL_CHANGES == 'true' }}
-        env:
-          GRAYBOT_GPG_KEY: ${{ secrets.GRAYBOT_GPG_KEY }}
-        run: |
-          echo "$GRAYBOT_GPG_KEY" | gpg --batch --import
-          export GPG_KEY_ID=$(gpg --list-secret-keys --keyid-format LONG | grep sec | awk '{print $2}' | cut -d/ -f2)
-          git config --global user.signingkey $GPG_KEY_ID
-          git config --global commit.gpgSign true
-          git config --global user.email "automation@graycore.io"
-          git config --global user.name "Beep Boop"
-          git checkout -b chore/pinback-${{ steps.version.outputs.VERSION }}
-          git add .
-          git commit -m "chore: restore internal action refs to @main"
-          git push --force origin chore/pinback-${{ steps.version.outputs.VERSION }}
-
-      - name: Open PR
-        if: ${{ steps.local-changes.outputs.HAS_LOCAL_CHANGES == 'true' }}
-        env:
-          GH_TOKEN: ${{ secrets.GRAYBOT_PIN_BACK_PAT }}
-        run: |
-          BRANCH="chore/pinback-${{ steps.version.outputs.VERSION }}"
-          EXISTING=$(gh pr list --head "$BRANCH" --json number --jq '.[0].number // empty')
-          if [ -z "$EXISTING" ]; then
-            gh pr create \
-              --base main \
-              --head "$BRANCH" \
-              --title "chore: restore internal action refs to @main after ${{ steps.version.outputs.VERSION }}" \
-              --body "Restores all internal \`graycoreio/github-actions-magento2\` action refs from \`${{ steps.version.outputs.VERSION }}\` back to \`@main\`."
-          else
-            echo "PR #$EXISTING already exists for $BRANCH — skipping creation"
-          fi
@@ -4,6 +4,7 @@ on:
  push:
    branches:
      - main
+  workflow_dispatch:

 env:
  RELEASE_BRANCH: release-please--branches--main--components--github-actions-magento2
@@ -13,13 +14,28 @@ jobs:
    runs-on: ubuntu-latest
    permissions:
      contents: write
+    outputs:
+      releases_created: ${{ steps.release.outputs.releases_created }}
    steps:
      - id: release
        uses: googleapis/release-please-action@v4
        with:
          token: ${{ secrets.GRAYCORE_GITHUB_TOKEN }}

+      - name: Check if release branch exists
+        id: branch-check
+        if: steps.release.outputs.releases_created != 'true'
+        env:
+          GH_TOKEN: ${{ secrets.GRAYCORE_GITHUB_TOKEN }}
+        run: |
+          if gh api "repos/${{ github.repository }}/git/refs/heads/${{ env.RELEASE_BRANCH }}" --silent 2>/dev/null; then
+            echo "EXISTS=true" >> $GITHUB_OUTPUT
+          else
+            echo "EXISTS=false" >> $GITHUB_OUTPUT
+          fi
+
      - name: Checkout release PR branch
+        if: steps.branch-check.outputs.EXISTS == 'true'
        uses: actions/checkout@v6
        with:
          ref: ${{ env.RELEASE_BRANCH }}
@@ -27,13 +43,14 @@ jobs:

      - name: Pin refs on release PR branch
        id: pin-refs
+        if: steps.branch-check.outputs.EXISTS == 'true'
        run: |
          VERSION="v$(jq -r '."."' .release-please-manifest.json)"
          echo "VERSION=${VERSION}" >> $GITHUB_OUTPUT

          sed -i "s|uses: graycoreio/github-actions-magento2/\([^@]*\)@main|uses: graycoreio/github-actions-magento2/\1@${VERSION}|g" \
            */action.yml \
-            $(find .github/workflows \( -name "*.yml" -o -name "*.yaml" \) ! -name "release-*")
+            $(find .github/workflows \( -name "*.yml" -o -name "*.yaml" \) ! -name "release-*" ! -name "_internal*")

          if git diff --quiet; then
            echo "HAS_CHANGES=false" >> $GITHUB_OUTPUT
@@ -54,4 +71,68 @@ jobs:
          git config --global user.name "Beep Boop"
          git add .
          git commit -m "chore: pin internal action refs to ${{ steps.pin-refs.outputs.VERSION }}"
-          git push origin ${{ env.RELEASE_BRANCH }}
+          git push origin ${{ env.RELEASE_BRANCH }}
+
+  pinback:
+    needs: release-please
+    if: needs.release-please.outputs.releases_created == 'true'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: main
+          token: ${{ secrets.GRAYBOT_PIN_BACK_PAT }}
+
+      - name: Extract version
+        id: version
+        run: |
+          VERSION="v$(jq -r '."."' .release-please-manifest.json)"
+          echo "VERSION=${VERSION}" >> $GITHUB_OUTPUT
+
+      - name: Restore @main refs
+        run: |
+          sed -i "s|uses: graycoreio/github-actions-magento2/\([^@]*\)@[^ #]*|uses: graycoreio/github-actions-magento2/\1@main|g" \
+            */action.yml \
+            $(find .github/workflows \( -name "*.yml" -o -name "*.yaml" \) ! -name "release-please.yml")
+
+      - name: Show changed files
+        run: git diff
+
+      - name: Check for changes
+        id: changes
+        run: |
+          if git diff --quiet; then
+            echo "HAS_CHANGES=false" >> $GITHUB_OUTPUT
+          else
+            echo "HAS_CHANGES=true" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Commit and open pinback PR
+        if: steps.changes.outputs.HAS_CHANGES == 'true'
+        env:
+          GRAYBOT_GPG_KEY: ${{ secrets.GRAYBOT_GPG_KEY }}
+          GH_TOKEN: ${{ secrets.GRAYBOT_PIN_BACK_PAT }}
+        run: |
+          echo "$GRAYBOT_GPG_KEY" | gpg --batch --import
+          export GPG_KEY_ID=$(gpg --list-secret-keys --keyid-format LONG | grep sec | awk '{print $2}' | cut -d/ -f2)
+          git config --global user.signingkey $GPG_KEY_ID
+          git config --global commit.gpgSign true
+          git config --global user.email "automation@graycore.io"
+          git config --global user.name "Beep Boop"
+          BRANCH="chore/pinback-${{ steps.version.outputs.VERSION }}"
+          git checkout -b "$BRANCH"
+          git add .
+          git commit -m "chore: restore internal action refs to @main"
+          git push --force origin "$BRANCH"
+          EXISTING=$(gh pr list --head "$BRANCH" --json number --jq '.[0].number // empty')
+          if [ -z "$EXISTING" ]; then
+            gh pr create \
+              --base main \
+              --head "$BRANCH" \
+              --title "chore: restore internal action refs to @main after ${{ steps.version.outputs.VERSION }}" \
+              --body "Restores all internal \`graycoreio/github-actions-magento2\` action refs from \`${{ steps.version.outputs.VERSION }}\` back to \`@main\`."
+          else
+            echo "PR #$EXISTING already exists for $BRANCH — skipping creation"
+          fi