sync-shared-config.yml

name: Sync shared configurations

on:
  push:
    branches:
      - master
  pull_request:
  schedule:
    - cron: "0 */3 * * *" # Every 3 hours

permissions:
  contents: read

concurrency:
  group: "sync-shared-config-${{ github.ref }}"
  cancel-in-progress: true

jobs:
  sync:
    if: github.repository == 'Homebrew/.github'
    runs-on: ubuntu-latest
    strategy:
      matrix:
        repo:
          - Homebrew/.github
          - Homebrew/actions
          - Homebrew/brew
          - Homebrew/brew-pip-audit
          - Homebrew/brew.sh
          - Homebrew/ci-orchestrator
          - Homebrew/discussions
          - Homebrew/formula-patches
          - Homebrew/formulae.brew.sh
          - Homebrew/glibc-bootstrap
          - Homebrew/homebrew-aliases
          - Homebrew/homebrew-bundle
          - Homebrew/homebrew-cask
          - Homebrew/homebrew-command-not-found
          - Homebrew/homebrew-core
          - Homebrew/homebrew-formula-analytics
          - Homebrew/homebrew-linux-fonts
          - Homebrew/homebrew-portable-ruby
          - Homebrew/homebrew-services
          - Homebrew/homebrew-test-bot
          - Homebrew/install
          - Homebrew/orka_api_client
          - Homebrew/ruby-macho
          - Homebrew/rubydoc.brew.sh
          - Homebrew/mass-bottling-tracker-private
          - Homebrew/governance-private
          - Homebrew/security-private
          - Homebrew/ops-private
      fail-fast: false
    steps:
      - name: Set up Homebrew
        id: set-up-homebrew
        uses: Homebrew/actions/setup-homebrew@master

      - name: Clone source repository
        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
        with:
          persist-credentials: false

      - run: brew install-bundler-gems --groups=style
        if: ${{ matrix.repo == 'Homebrew/.github' }}
        env:
          HOMEBREW_DEVELOPER: 1

      - run: brew style .github/actions/sync/*.rb
        if: ${{ matrix.repo == 'Homebrew/.github' }}
        env:
          HOMEBREW_DEVELOPER: 1

      - name: Clone target repository
        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
        with:
          repository: ${{ matrix.repo }}
          path: target/${{ matrix.repo }}
          token: ${{ secrets.HOMEBREW_DOTGITHUB_WORKFLOW_TOKEN }}

      - name: Configure Git user
        uses: Homebrew/actions/git-user-config@master
        with:
          username: BrewTestBot

      - name: Set up GPG commit signing
        uses: Homebrew/actions/setup-commit-signing@master
        with:
          signing_key: ${{ secrets.BREWTESTBOT_GPG_SIGNING_SUBKEY }}

      - name: Sync initial Ruby version
        run: cp /home/linuxbrew/.linuxbrew/Homebrew/Library/Homebrew/.ruby-version .

      - name: Install Ruby
        uses: ruby/setup-ruby@52753b7da854d5c07df37391a986c76ab4615999 # v1.191.0
        with:
          bundler-cache: true

      - name: Detect changes
        id: detect_changes
        env:
          HOMEBREW_GPG_PASSPHRASE: ${{ secrets.BREWTESTBOT_GPG_SIGNING_SUBKEY_PASSPHRASE }}
        run: ./.github/actions/sync/shared-config.rb 'target/${{ matrix.repo }}' '/home/linuxbrew/.linuxbrew/Homebrew'

      - name: Create pull request
        if: ${{ github.ref == 'refs/heads/master' && steps.detect_changes.outputs.pull_request == 'true' }}
        run: |
          set -euo pipefail

          cd target/${{ matrix.repo }}
          git checkout -b sync-shared-config

          if gh api \
              -X GET \
              --header 'Accept: application/vnd.github+json' \
              --header 'X-GitHub-Api-Version: 2022-11-28' \
              /repos/{owner}/{repo}/pulls \
              -f head=Homebrew:sync-shared-config \
              -f state=open |
              jq --exit-status 'length == 0'
          then
            git push --set-upstream --force origin sync-shared-config
            gh pr create --head sync-shared-config --title "Synchronize shared configuration" --body 'This pull request was created automatically by the [`sync-shared-config`](https://github.com/Homebrew/.github/blob/HEAD/.github/actions/sync/shared-config.rb) workflow.'
          else
            git fetch origin sync-shared-config
            if ! git diff --no-ext-diff --quiet --exit-code origin/sync-shared-config
            then
              git push --force origin sync-shared-config
            fi
          fi
        env:
          GH_REPO: ${{ matrix.repo }}
          GH_TOKEN: ${{ secrets.HOMEBREW_DOTGITHUB_WORKFLOW_TOKEN }}
  conclusion:
    needs: sync
    runs-on: ubuntu-latest
    if: always()
    steps:
      - name: Result
        run: ${{ needs.sync.result == 'success' }}