This repository was archived by the owner on Jun 29, 2026. It is now read-only.

chore(deps): update dependency credhub-cli #2489

Workflow file for this run

.github/workflows/dependency-updates-post-processing.yaml at 3da664d

	name: "Dependency Updates Post-Processing"
	on:
	pull_request:
	paths:
	- ".github/workflows/dependency-updates-post-processing.yaml"
	- "src/**/go.mod"
	- "src/**/go.sum"
	- "devbox.json"
	- "nix/packages/uaac/Gemfile*"
	workflow_dispatch: {}
	jobs:
	dependency-updates-post-processing:
	name: "Dependency Updates Post-Processing"
	if: "!contains(github.event.pull_request.labels.*.name, 'skip-dependency-postprocessing')"
	runs-on: ubuntu-latest
	permissions:
	pull-requests: write
	contents: write
	steps:
	# We potentially want to add at the end a commit by the author of the most recent
	# commit in this branch. However github has some protection which prevents workflows
	# to run in case a commit has been pushed with the default job-specific github-token.
	# For this case we need to use another one here.
	#
	# For more information, see:
	# <https://docs.github.com/en/actions/security-guides/automatic-token-authentication#using-the-github_token-in-a-workflow>
	- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
	with:
	fetch-depth: 0
	submodules: true
	token: ${{ secrets.APP_AUTOSCALER_CI_TOKEN }} # With push token that can trigger new PR jobs
	- name: Configure git
	id: configure_git
	shell: bash
	run: \|
	#! /usr/bin/env bash
	set -eu -o pipefail

	git config --global --add safe.directory "${GITHUB_WORKSPACE}"

	commit_author_name="$(git log -1 --pretty=format:'%an')"
	commit_author_email="$(git log -1 --pretty=format:'%ae')"
	commit_subject="$(git log -1 --pretty=format:'%s')"
	readonly commit_author_name commit_author_email commit_subject

	git config user.name "${commit_author_name}"
	git config user.email "${commit_author_email}"

	echo "commit_author_name=${commit_author_name}" >> "${GITHUB_OUTPUT}"
	echo "commit_subject=${commit_subject}" >> "${GITHUB_OUTPUT}"

	- name: Install devbox
	uses: jetify-com/devbox-install-action@22b0f5500b14df4ea357ce673fbd4ced940ed6a1 # v0.13.0
	with:
	enable-cache: 'true'
	- name: Make devbox shellenv available
	run: \|
	eval "$(devbox shellenv)"
	printenv >> "${GITHUB_ENV}"

	- name: go-mod-tidy and make package-specs
	shell: bash
	env:
	GH_TOKEN: "${{ secrets.APP_AUTOSCALER_CI_TOKEN }}"
	PR_BRANCH_REF: "${{ github.head_ref }}"
	run: \|
	#! /usr/bin/env bash
	set -eu -o pipefail

	# We need the subsequent standard-message to determine if the last commit
	# has already cleaned up everything. In this case this workflow should not
	# change anything and we exit early.
	# An alternative would be to use a tag for this. But this does affect the whole
	# PR instead of just the latest commit.
	declare -r tidy_message='🤖🦾🛠️ go mod tidy & make package-specs'
	declare -r commit_message='${{steps.configure_git.outputs.commit_subject}}'

	if [[ "${commit_message}" == "${tidy_message}" ]]
	then
	# shellcheck disable=SC2016
	echo 'This commit is already an automatic `go-mod-tidy and make package-specs`! Exiting …'
	exit 0
	fi

	# Generated files are needed for `go mod tidy` which is a dependency of the
	# target `package-specs`. However the generation of them itself already
	# requires go-modules to be tidied up. So we need to generate the files
	# before changing `go.mod` and `go.sum`.
	current_branch_head="${PR_BRANCH_REF}"
	readonly current_branch_head
	echo "Working in branch \`${current_branch_head}\`" \
	" on revision \`$(git rev-parse 'HEAD')\`."

	echo "Generating clients, servers and fakes on \`${current_branch_head}~1\`"
	# Sometimes just loading an env may trigger a change regarding the `plugin_version` of
	# the derivation python.
	git restore devbox.lock
	git checkout 'HEAD~1'

	make generate-fakes
	make generate-openapi-generated-clients-and-servers

	echo "Successfully generated the code. Switching back to \`${current_branch_head}\`!"
	# Sometimes just loading an env may trigger a change regarding the `plugin_version` of
	# the derivation python.
	git restore devbox.lock
	git checkout "${current_branch_head}"

	# ⚠️ For this workflow to be successful, the subsequent line must not
	# trigger again the creation of the generated files.
	make package-specs
	make update-uaac-nix-package

	declare -i num_changed_files
	num_changed_files="$(git status --porcelain \| wc --lines)"
	readonly num_changed_files

	if ((num_changed_files > 0))
	then
	echo 'Changes to some files were necessary!'
	git add .
	git commit --message="${tidy_message}"
	git pull --rebase=true
	git push
	else
	echo 'No files changed!'
	fi
	echo '🏁'

Navigation Menu

Uh oh!

chore(deps): update dependency credhub-cli #2489

Workflow file

chore(deps): update dependency credhub-cli #2489

Uh oh!

Workflow file for this run