sync-shared-config.yml

name: Sync shared configurations

on:
  push:
    branches:
      - master
  pull_request:
  schedule:
    - cron: "0 */3 * * *" # Every 3 hours
  workflow_dispatch:

permissions:
  contents: read

defaults:
  run:
    shell: bash -xeuo pipefail {0}

concurrency:
  group: "sync-shared-config-${{ github.ref }}"
  cancel-in-progress: true

jobs:
  sync:
    if: github.repository == 'Homebrew/.github'
    runs-on: ubuntu-latest
    strategy:
      matrix:
        repo:
          - Homebrew/.github
          - Homebrew/actions
          - Homebrew/brew
          - Homebrew/brew-pip-audit
          - Homebrew/brew.sh
          - Homebrew/ci-orchestrator
          - Homebrew/discussions
          - Homebrew/formula-patches
          - Homebrew/formulae.brew.sh
          - Homebrew/glibc-bootstrap
          - Homebrew/homebrew-aliases
          - Homebrew/homebrew-bundle
          - Homebrew/homebrew-cask
          - Homebrew/homebrew-command-not-found
          - Homebrew/homebrew-core
          - Homebrew/homebrew-formula-analytics
          - Homebrew/homebrew-linux-fonts
          - Homebrew/homebrew-portable-ruby
          - Homebrew/homebrew-services
          - Homebrew/homebrew-test-bot
          - Homebrew/install
          - Homebrew/orka_api_client
          - Homebrew/ruby-macho
          - Homebrew/rubydoc.brew.sh
          - Homebrew/mass-bottling-tracker-private
          - Homebrew/governance-private
          - Homebrew/security-private
          - Homebrew/ops-private
      fail-fast: false
    steps:
      - name: Set up Homebrew
        id: set-up-homebrew
        uses: Homebrew/actions/setup-homebrew@master

      - name: Clone source repository
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
        with:
          persist-credentials: false

      - run: brew install-bundler-gems --groups=style
        if: matrix.repo == 'Homebrew/.github'
        env:
          HOMEBREW_DEVELOPER: 1

      - run: brew style .github/actions/sync/*.rb
        if: matrix.repo == 'Homebrew/.github'
        env:
          HOMEBREW_DEVELOPER: 1

      - name: Clone target repository
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
        with:
          repository: ${{ matrix.repo }}
          path: target/${{ matrix.repo }}
          token: ${{ secrets.HOMEBREW_DOTGITHUB_WORKFLOW_TOKEN }}

      - name: Configure Git user
        uses: Homebrew/actions/git-user-config@master
        with:
          username: BrewTestBot

      - name: Set up GPG commit signing
        uses: Homebrew/actions/setup-commit-signing@master
        with:
          signing_key: ${{ secrets.BREWTESTBOT_GPG_SIGNING_SUBKEY }}

      - name: Sync initial Ruby version
        run: cp /home/linuxbrew/.linuxbrew/Homebrew/Library/Homebrew/.ruby-version .

      - name: Install Ruby
        uses: ruby/setup-ruby@a2bbe5b1b236842c1cb7dd11e8e3b51e0a616acc # v1.202.0
        with:
          bundler-cache: true

      - name: Detect changes
        id: detect_changes
        env:
          HOMEBREW_GPG_PASSPHRASE: ${{ secrets.BREWTESTBOT_GPG_SIGNING_SUBKEY_PASSPHRASE }}
          TARGET: target/${{ matrix.repo }}
        run: ./.github/actions/sync/shared-config.rb "${TARGET}" '/home/linuxbrew/.linuxbrew/Homebrew'

      - name: Create pull request
        if: github.ref == 'refs/heads/master' && steps.detect_changes.outputs.pull_request == 'true'
        run: |
          cd "target/$GH_REPO"
          git checkout -b sync-shared-config

          # Stagger network calls over the next 10 minutes to minimise errors.
          sleep "$(( RANDOM % 60 * 10 ))"
          if gh api \
              -X GET \
              --header 'Accept: application/vnd.github+json' \
              --header 'X-GitHub-Api-Version: 2022-11-28' \
              "/repos/${GH_REPO}/pulls" \
              -f head=Homebrew:sync-shared-config \
              -f state=open |
              jq --exit-status 'length == 0'
          then
            git push --set-upstream --force origin sync-shared-config
            # We don't want backticks to be expanded.
            # shellcheck disable=SC2016
            gh pr create --head sync-shared-config --title "Synchronize shared configuration" --body 'This pull request was created automatically by the [`sync-shared-config`](https://github.com/Homebrew/.github/blob/HEAD/.github/actions/sync/shared-config.rb) workflow.'
          else
            git fetch origin sync-shared-config
            if ! git diff --no-ext-diff --quiet --exit-code origin/sync-shared-config
            then
              git push --force origin sync-shared-config
            fi
          fi
        env:
          GH_REPO: ${{ matrix.repo }}
          GH_TOKEN: ${{ secrets.HOMEBREW_DOTGITHUB_WORKFLOW_TOKEN }}
  conclusion:
    needs: sync
    runs-on: ubuntu-latest
    if: always()
    steps:
      - name: Result
        env:
          RESULT: ${{ needs.sync.result }}
        run: |
          [[ "${RESULT}" == success ]]