userli/.github/workflows/composer-update.yml at main · systemli/userli · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
name: Composer Update

on:
  schedule:
    - cron: "0 8 * * 1"
  workflow_dispatch: {}

jobs:
  update:
    runs-on: ubuntu-24.04
    name: Update Composer Dependencies
    steps:
      - name: Obtain Access Token
        id: access_token
        run: |
          TOKEN="$(npx obtain-github-app-installation-access-token ci ${{ secrets.SYSTEMLI_APP_CREDENTIALS_TOKEN }})"
          echo "::add-mask::$TOKEN"
          echo "token=$TOKEN" >> $GITHUB_OUTPUT

      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

      - name: Setup PHP
        uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1 # v2
        with:
          php-version: "8.4"
          extensions: openssl, sodium
          tools: composer

      - name: Install dependencies
        run: composer install --no-scripts

      - name: Update dependencies
        run: composer update --no-scripts

      - name: Generate update summary
        run: |
          composer global config allow-plugins.ion-bazan/composer-diff true
          composer global require ion-bazan/composer-diff
          {
            echo "## Composer Update Summary"
            echo ""
            composer diff -l -f mdtable 2>/dev/null || echo "No changes detected."
          } > /tmp/composer-diff.md

      - name: Create Pull Request
        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
        with:
          token: ${{ steps.access_token.outputs.token }}
          commit-message: "⬆️ Update composer dependencies"
          branch: automated/composer-update
          title: "⬆️ Update composer dependencies"
          body-path: /tmp/composer-diff.md
          draft: true