Bump the minor group across 1 directory with 13 updates #1717
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # goreleaser knows not to publish when the trigger is _not_ a tag | |
| name: Release | |
| on: | |
| pull_request: | |
| push: | |
| tags: | |
| - v* | |
| branches: | |
| - master | |
| jobs: | |
| goreleaser: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| id-token: write | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Set up Go | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version: "1.22" | |
| - uses: docker/setup-buildx-action@v3 | |
| - run: make test | |
| - uses: docker/login-action@v3 | |
| if: startsWith(github.ref, 'refs/tags/') | |
| with: | |
| username: ${{ secrets.DOCKER_USERNAME }} | |
| password: ${{ secrets.DOCKER_PASSWORD }} | |
| - uses: goreleaser/goreleaser-action@v6 | |
| with: | |
| version: '~> v2' | |
| args: release --clean ${{ !startsWith(github.ref, 'refs/tags/') && '--snapshot' || '' }} | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.ORG_GH_TOKEN }} | |
| - name: find amd64 linux binary | |
| id: binary | |
| run: | | |
| path=$(jq -rc '.[] | select((.type=="Binary") and (.goos=="linux") and .goarch=="amd64") | .path' dist/artifacts.json) | |
| echo "path=${path}" >> $GITHUB_OUTPUT | |
| - uses: actions/upload-artifact@v4 | |
| with: | |
| name: binary-amd64 | |
| path: ${{ steps.binary.outputs.path }} | |
| retention-days: 1 | |
| doctor: | |
| needs: goreleaser | |
| runs-on: ubuntu-latest | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| repo: [tyk, tyk-analytics, tyk-pump, tyk-identity-broker, tyk-sink, portal, tyk-pro] | |
| include: | |
| - owner: TykTechnologies | |
| - repo: tyk-pro | |
| owner: tyklabs | |
| steps: | |
| - name: checkout ${{matrix.repo}}/${{matrix.branch}} | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: ${{ matrix.owner }}/${{ matrix.repo }} | |
| ref: ${{ matrix.branch }} | |
| token: ${{ secrets.ORG_GH_TOKEN }} | |
| path: ${{ matrix.repo }} | |
| fetch-depth: 1 | |
| - uses: actions/download-artifact@v4 | |
| id: download | |
| with: | |
| name: binary-amd64 | |
| - name: prepare gromit | |
| id: gromit | |
| run: | | |
| gromit="${{ steps.download.outputs.download-path }}/gromit" | |
| chmod +x $gromit | |
| echo "bin=${gromit}" >> "$GITHUB_OUTPUT" | |
| - name: update ${{ matrix.repo }} | |
| if: ${{ (github.event_name == 'push' && github.ref_name == 'master') || endsWith(github.head_ref, 'releng') }} | |
| env: | |
| GITHUB_TOKEN: ${{ matrix.repo == 'tyk-pro' && secrets.TYKLABS_TOKEN || secrets.ORG_GH_TOKEN }} | |
| run: | | |
| set -eo pipefail | |
| ${{ steps.gromit.outputs.bin }} policy sync ${{ matrix.repo }} | |
| echo "## :hospital: ℞ ${{ matrix.repo }}" >> $GITHUB_STEP_SUMMARY | |
| cd ${{ matrix.repo }} && for b in $(git for-each-ref --format '%(refname:short)' refs/heads); do | |
| echo -e "<details>\n <summary> ${{ matrix.repo }} $b </summary>\n" | |
| echo '```diff' | |
| git diff origin/${b} $b | |
| echo -e '```\n</details>' | |
| done | tee -a $GITHUB_STEP_SUMMARY |