Bump the npm-minor group across 1 directory with 4 updates #866
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Rebuild Action | |
| on: | |
| pull_request: | |
| types: [labeled] | |
| workflow_dispatch: | |
| defaults: | |
| run: | |
| shell: bash | |
| jobs: | |
| rebuild: | |
| name: Rebuild Action | |
| runs-on: ubuntu-latest | |
| if: github.event.label.name == 'Rebuild' || github.event_name == 'workflow_dispatch' | |
| env: | |
| HEAD_REF: ${{ github.event.pull_request.head.ref || github.event.ref }} | |
| BASE_BRANCH: ${{ github.event.pull_request.base.ref || 'main' }} | |
| permissions: | |
| contents: write # needed to push rebuilt commit | |
| pull-requests: write # needed to comment on the PR | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| fetch-depth: 0 | |
| ref: ${{ env.HEAD_REF }} | |
| - name: Set up Node.js | |
| uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 | |
| with: | |
| node-version: 24 | |
| cache: 'npm' | |
| - name: Remove label | |
| if: github.event_name == 'pull_request' | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| PR_NUMBER: ${{ github.event.pull_request.number }} | |
| run: | | |
| gh pr edit --repo github/codeql-action "$PR_NUMBER" \ | |
| --remove-label "Rebuild" | |
| - name: Configure git | |
| run: | | |
| git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com" | |
| git config --global user.name "github-actions[bot]" | |
| - name: Merge in changes from base branch | |
| id: merge | |
| run: | | |
| git fetch origin "$BASE_BRANCH" | |
| # Allow merge conflicts in `lib`, since rebuilding should resolve them. | |
| git merge "origin/$BASE_BRANCH" | |
| MERGE_RESULT=$? | |
| if [ "$MERGE_RESULT" -eq 0 ]; then | |
| echo "Merge succeeded cleanly." | |
| elif [ "$MERGE_RESULT" -eq 1 ]; then | |
| echo "Merge conflicts detected (exit code $MERGE_RESULT), continuing." | |
| else | |
| echo "git merge failed with unexpected exit code $MERGE_RESULT." | |
| exit 1 | |
| fi | |
| if [ "$MERGE_RESULT" -ne 0 ]; then | |
| echo "merge-in-progress=true" >> $GITHUB_OUTPUT | |
| # Check for merge conflicts outside of `lib`. Disable git diff's trailing whitespace check | |
| # since `node_modules/@types/semver/README.md` fails it. | |
| if git -c core.whitespace=-trailing-space diff --check | grep --invert-match '^lib/'; then | |
| echo "Merge conflicts were detected outside of the lib directory. Please resolve them manually." | |
| git -c core.whitespace=-trailing-space diff --check | grep --invert-match '^lib/' || true | |
| exit 1 | |
| fi | |
| echo "No merge conflicts found outside the lib directory. We should be able to resolve all of" \ | |
| "these by rebuilding the Action." | |
| fi | |
| - name: Compile TypeScript | |
| run: | | |
| npm ci | |
| npm run lint -- --fix | |
| npm run build | |
| - name: Sync back version updates to generated workflows | |
| # Only sync back versions on Dependabot update PRs | |
| if: startsWith(env.HEAD_REF, 'dependabot/') | |
| working-directory: pr-checks | |
| run: | | |
| npm ci | |
| npx tsx sync-back.ts --verbose | |
| - name: Generate workflows | |
| working-directory: pr-checks | |
| run: ./sync.sh | |
| - name: "Merge in progress: Finish merge and push" | |
| if: steps.merge.outputs.merge-in-progress == 'true' | |
| run: | | |
| echo "Finishing merge and pushing changes." | |
| git add --all | |
| git commit --no-edit | |
| git push | |
| - name: "No merge in progress: Check for changes and push" | |
| if: steps.merge.outputs.merge-in-progress != 'true' | |
| id: push | |
| run: | | |
| if [ ! -z "$(git status --porcelain)" ]; then | |
| echo "Changes detected, committing and pushing." | |
| git add --all | |
| # If the merge originally had conflicts, finish the merge. | |
| # Otherwise, just commit the changes. | |
| if git rev-parse --verify MERGE_HEAD >/dev/null 2>&1; then | |
| echo "In progress merge detected, finishing it up." | |
| git commit --no-edit | |
| else | |
| echo "No in-progress merge detected, committing changes." | |
| git commit -m "Rebuild" | |
| fi | |
| echo "Pushing changes" | |
| git push | |
| echo "changes=true" >> $GITHUB_OUTPUT | |
| else | |
| echo "No changes detected, nothing to commit." | |
| fi | |
| - name: Notify about rebuild | |
| if: >- | |
| github.event_name == 'pull_request' && | |
| ( | |
| steps.merge.outputs.merge-in-progress == 'true' || | |
| steps.push.outputs.changes == 'true' | |
| ) | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| PR_NUMBER: ${{ github.event.pull_request.number }} | |
| run: | | |
| echo "Pushed a commit to rebuild the Action." \ | |
| "Please approve running the PR checks." | | |
| gh pr comment --body-file - --repo github/codeql-action "$PR_NUMBER" |