update-dependencies.yml

---
name: Update Dependencies

on:
  schedule:
    # Run every Monday at 9:00 AM UTC (1:00 AM PST / 2:00 AM PDT)
    - cron: "0 9 * * 1"
  workflow_dispatch:
    inputs:
      update_go_version:
        description: "Update Go version"
        required: false
        type: boolean
        default: false
      go_version:
        description: "Go version (if updating)"
        required: false
        type: string
        default: "1.20"
      major_upgrades:
        description: "Include major version upgrades"
        required: false
        type: boolean
        default: false

env:
  CI: true
  GO_VERSION: '1.20'

permissions:
  contents: write
  pull-requests: write

jobs:
  update-dependencies:
    runs-on: ubuntu-latest
    timeout-minutes: 20

    steps:
      - name: ⏱️ Start timer
        id: timer
        run: echo "start_time=$(date +%s)" >> "$GITHUB_OUTPUT"

      - name: 🏷️ Set lowercase image name
        id: image
        run: |
          echo "IMAGE_NAME=$(echo "${{ github.repository }}" | tr "[:upper:]" "[:lower:]")" >> "$GITHUB_ENV"

      - name: 🔀 Checkout repository
        uses: actions/checkout@v6
        with:
          fetch-depth: 0
          token: ${{ secrets.GITHUB_TOKEN }}

      - name: 🔧 Set up Go
        uses: actions/setup-go@v5
        with:
          go-version: ${{ github.event.inputs.update_go_version == 'true' && github.event.inputs.go_version || env.GO_VERSION }}
          cache: true

      - name: 🔧 Configure git
        run: |
          git config --local user.email "github-actions[bot]@users.noreply.github.com"
          git config --local user.name "github-actions[bot]"

      - name: 🚀 Run update-project.sh
        id: analyze
        env:
          MAJOR_UPGRADES: ${{ github.event.inputs.major_upgrades }}
          UPDATE_GO_VERSION: ${{ github.event.inputs.update_go_version }}
          NEW_GO_VERSION: ${{ github.event.inputs.go_version }}
        run: |
          ARGS=(--ci)
          if [[ "$MAJOR_UPGRADES" == "true" ]]; then
            ARGS+=(--major)
          fi
          if [[ "$UPDATE_GO_VERSION" == "true" ]]; then
            ARGS+=(--go-version "$NEW_GO_VERSION")
          fi

          ./scripts/update-project.sh "${ARGS[@]}"

      - name: 📋 Show change summary
        if: steps.analyze.outputs.no_changes != 'true'
        run: |
          if [[ -f change-summary.md ]]; then
            cat change-summary.md
          fi

      - name: 📝 Generate PR title
        if: steps.analyze.outputs.no_changes != 'true'
        id: pr-title
        env:
          UPDATE_GO_VERSION: ${{ github.event.inputs.update_go_version }}
          NEW_GO_VERSION: ${{ github.event.inputs.go_version }}
          CHANGES: ${{ steps.analyze.outputs.direct_changes }}
        run: |
          PR_TITLE="chore(deps): update Go dependencies"

          if [[ "$UPDATE_GO_VERSION" == "true" ]]; then
            # Validate format before embedding in title
            if [[ "$NEW_GO_VERSION" =~ ^[0-9]+\.[0-9]+(\.[0-9]+)?$ ]]; then
              PR_TITLE="$PR_TITLE (Go $NEW_GO_VERSION)"
            fi
          fi

          if [[ -n "$CHANGES" ]] && [[ "$CHANGES" =~ ^[0-9]+$ ]] && [[ "$CHANGES" -gt 0 ]]; then
            PR_TITLE="$PR_TITLE ($CHANGES packages)"
          fi

          echo "title=$PR_TITLE" >> "$GITHUB_OUTPUT"

      - name: 📝 Create Pull Request
        if: steps.analyze.outputs.no_changes != 'true'
        id: create-pr
        uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f # v7.0.5
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          branch: automation/update-dependencies
          delete-branch: true
          title: ${{ steps.pr-title.outputs.title }}
          body: |
            ## 🤖 Automated Dependency Update

            This PR was automatically generated by the weekly dependency update workflow.

            ### 📊 Update Summary

            **Dependency Statistics:**
            - Total dependencies before: ${{ steps.analyze.outputs.current_deps }}
            - Total dependencies after: ${{ steps.analyze.outputs.new_deps }}
            - Direct dependency changes: ${{ steps.analyze.outputs.direct_changes }}

            **Go Version:**
            - Current: ${{ steps.analyze.outputs.current_go_version }}
            ${{ github.event.inputs.update_go_version == 'true' && format('- Updated to: go{0}', github.event.inputs.go_version) || '- No version update' }}

            ### 📋 Changes Made

            - ✅ Updated Go dependencies to latest compatible versions
            - 🔒 All security patches applied
            - 🧪 Tests passed with updated dependencies
            - 🔍 Dependencies verified with `go mod verify`

            ### 🔍 Manual Verification Required

            Before merging, please:

            1. **Review dependency changes**: Check the Files tab for `go.mod` and `go.sum` changes
            2. **Check CI status**: Ensure all checks pass (quality, tests, build)
            3. **Test locally** (optional):
               ```bash
               git checkout automation/update-dependencies
               go mod download
               go test -v ./...
               go build -o alertmanager-discord
               ```
            4. **Check for breaking changes**: Review changelogs of major updates
            5. **Test Docker build**:
               ```bash
               docker build -t alertmanager-discord:test .
               docker run --rm alertmanager-discord:test -healthcheck
               ```

            ### 🛡️ Security Check

            Run security audit locally:
            ```bash
            go list -json -m all
            # Review for known vulnerabilities
            ```

            ### 📝 Notes

            - **Triggered by**: ${{ github.event_name }}
            - **Major upgrades**: ${{ github.event.inputs.major_upgrades || 'false' }}
            - **Go version update**: ${{ github.event.inputs.update_go_version || 'false' }}
            - **Update strategy**: ${{ github.event.inputs.major_upgrades == 'true' && 'All versions (including major)' || 'Patch and minor versions only' }}

            ---

            <details>
            <summary>📊 Detailed Changes</summary>

            $(cat change-summary.md)

            </details>

            <details>
            <summary>📦 Dependencies Before Update</summary>

            ```
            $(cat deps-before.txt)
            ```

            </details>

            <details>
            <summary>📦 Dependencies After Update</summary>

            ```
            $(cat deps-after.txt)
            ```

            </details>
          commit-message: |
            chore(deps): update Go dependencies

            - Update Go packages to latest compatible versions
            - Run go mod tidy to clean up module files
            - Verify all dependencies
            ${{ github.event.inputs.update_go_version == 'true' && format('- Update Go version to {0}', github.event.inputs.go_version) || '' }}

            Generated by automated dependency update workflow

            Update strategy: ${{ github.event.inputs.major_upgrades == 'true' && 'major+minor+patch' || 'minor+patch only' }}
          assignees: SimplicityGuy
          labels: dependencies,automated

      - name: 📊 Collect metrics
        if: always()
        id: metrics
        run: |
          end_time=$(date +%s)
          duration=$((end_time - ${{ steps.timer.outputs.start_time }}))
          echo "duration=${duration}" >> "$GITHUB_OUTPUT"

          CHANGES="${{ steps.analyze.outputs.no_changes == 'true' && 'none' || steps.analyze.outputs.direct_changes }}"
          echo "::notice title=Dependency Update Metrics::Duration: ${duration}s, Changes: ${CHANGES}"

      - name: 📊 Summary
        if: always()
        run: |
          echo "═══════════════════════════════════════"
          echo "  Dependency Update Summary"
          echo "═══════════════════════════════════════"

          if [[ "${{ steps.analyze.outputs.no_changes }}" == "true" ]]; then
            echo "✅ All dependencies are already up to date!"
            echo "   No changes detected in go.mod or go.sum"
          elif [[ "${{ steps.create-pr.conclusion }}" == "success" ]]; then
            echo "✅ Successfully created PR with dependency updates"
            echo "🔗 Review the PR: ${{ steps.create-pr.outputs.pull-request-url }}"
            echo "📊 Direct changes: ${{ steps.analyze.outputs.direct_changes }}"
            echo "⏱️  Duration: ${{ steps.metrics.outputs.duration }}s"
          else
            echo "❌ Failed to update dependencies or create PR"
            if [[ -f change-summary.md ]]; then
              cat change-summary.md
            fi
          fi

          echo "═══════════════════════════════════════"