licenses.yml

name: Update Third-Party Licenses

on:
  push:
    branches: [main]
    paths:
      - 'package-lock.json'
  workflow_dispatch:

permissions:
  contents: write
  pull-requests: write

jobs:
  update-licenses:
    name: Update Licenses
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: npm

      - run: npm ci

      - name: Generate third-party license file
        run: npx generate-license-file --input package.json --output THIRD_PARTY_LICENSES.txt --overwrite

      - name: Check for changes
        id: check
        run: |
          if git diff --quiet THIRD_PARTY_LICENSES.txt; then
            echo "changed=false" >> $GITHUB_OUTPUT
          else
            echo "changed=true" >> $GITHUB_OUTPUT
          fi

      - name: Create Pull Request
        if: steps.check.outputs.changed == 'true'
        uses: peter-evans/create-pull-request@v7
        with:
          commit-message: 'chore: update third-party licenses'
          title: 'chore: update third-party licenses'
          body: |
            This PR updates the THIRD_PARTY_LICENSES.txt file with the latest
            license information from npm dependencies.

            Auto-generated by the licenses workflow.
          branch: chore/update-licenses
          delete-branch: true
          labels: dependencies