regorus/.github/workflows/dependabot-refresh-cargo-lockfiles.yml at d1c8d26f63146a831e9dad18cc79d45cda6da63b · anakrish/regorus · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
# Copyright (c) Microsoft Corporation. All rights reserved.
#
name: dependabot/refresh-cargo-lockfiles

on:
  pull_request_target:
    types: [opened, synchronize, reopened]
    branches: ["main"]

permissions:
  contents: write

env:
  CARGO_TERM_COLOR: always

jobs:
  refresh-cargo-lockfiles:
    if: >-
      github.actor == 'dependabot[bot]' &&
      github.event.pull_request.head.repo.full_name == github.repository
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      with:
        repository: ${{ github.event.pull_request.head.repo.full_name }}
        ref: ${{ github.event.pull_request.head.ref }}
        fetch-depth: 0

    - name: Setup Rust toolchain
      run: |
        rustup override set 1.92.0
        cargo --version
        rustc --version

    - name: Refresh affected Cargo lockfiles
      shell: bash
      run: |
        set -euo pipefail

        base_sha="${{ github.event.pull_request.base.sha }}"
        head_sha="${{ github.event.pull_request.head.sha }}"

        mapfile -t changed_files < <(git diff --name-only "$base_sha" "$head_sha" -- '**/Cargo.toml' '**/Cargo.lock')

        if [ "${#changed_files[@]}" -eq 0 ]; then
          echo "No Cargo manifest or lockfile changes detected."
          exit 0
        fi

        declare -A manifests=()
        for path in "${changed_files[@]}"; do
          case "$path" in
            bindings/ffi/*)
              manifests["bindings/ffi/Cargo.toml"]=1
              ;;
            bindings/java/*)
              manifests["bindings/java/Cargo.toml"]=1
              ;;
            bindings/python/*)
              manifests["bindings/python/Cargo.toml"]=1
              ;;
            bindings/ruby/*)
              manifests["bindings/ruby/Cargo.toml"]=1
              ;;
            bindings/wasm/*)
              manifests["bindings/wasm/Cargo.toml"]=1
              ;;
            *)
              manifests["Cargo.toml"]=1
              ;;
          esac
        done

        for manifest in "${!manifests[@]}"; do
          echo "Refreshing lockfile for $manifest"
          cargo metadata --format-version 1 --all-features --manifest-path "$manifest" > /dev/null
        done

        if [[ -n "${manifests[Cargo.toml]+x}" ]]; then
          echo "Refreshing lockfile for tests/ensure_no_std/Cargo.toml (thumbv7m-none-eabi)"
          cargo metadata --format-version 1 \
            --manifest-path tests/ensure_no_std/Cargo.toml \
            --filter-platform thumbv7m-none-eabi > /dev/null
        fi

    - name: Commit lockfile refresh
      shell: bash
      run: |
        set -euo pipefail

        git add Cargo.lock \
          bindings/ffi/Cargo.lock \
          bindings/java/Cargo.lock \
          bindings/python/Cargo.lock \
          bindings/ruby/Cargo.lock \
          bindings/wasm/Cargo.lock

        if git diff --cached --quiet; then
          echo "No Cargo lockfile changes required."
          exit 0
        fi

        git config user.name "github-actions[bot]"
        git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
        git commit -m "build(deps): refresh Cargo lockfiles"
        git push