Curriculum/.github/workflows/sync_roadmap_status.yml at main · ThePythonLedger/Curriculum · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
name: Sync Roadmap Status

on:
  issues:
    types: [assigned, unassigned, closed, reopened]
  # pull_request_target (not pull_request) so the workflow gets write
  # access even for PRs opened from forks. Safe here because we never
  # check out or run the fork's code — we only read the PR body
  # (already in the event payload) and write to ROADMAP.md on main.
  pull_request_target:
    types: [opened, ready_for_review, closed]
  # Run reconcile.py on demand ("Run workflow" button) and once a day
  # as a safety net against any missed event (e.g. an issue closed
  # before its ROADMAP.md line had "— #N" linked to it yet).
  workflow_dispatch: {}
  schedule:
    - cron: "0 4 * * *"

permissions:
  contents: write

jobs:
  sync:
    concurrency:
      group: roadmap-sync
      cancel-in-progress: true
    if: github.event_name == 'issues' || github.event_name == 'pull_request_target'
    runs-on: ubuntu-latest
    steps:
      # Uses a PAT (not the default GITHUB_TOKEN) so the later push is
      # attributed to an account the ruleset's bypass list actually
      # recognizes. The default token authenticates as github-actions[bot],
      # which doesn't hold a real repo "Write" role, so role-based bypass
      # entries never apply to it no matter how they're configured.
      - run: sleep 180

      - uses: actions/checkout@v4
        with:
          ref: main
          token: ${{ secrets.ROADMAP_PAT }}

      - uses: actions/setup-python@v5
        with:
          python-version: "3.12"

      - name: Update ROADMAP.md
        id: update
        run: python scripts/roadmap/sync_roadmap.py
        env:
          GITHUB_EVENT_NAME: ${{ github.event_name }}
          GITHUB_EVENT_PATH: ${{ github.event_path }}

      - name: Commit ROADMAP.md
        if: steps.update.outputs.changed == 'true'
        uses: stefanzweifel/git-auto-commit-action@v5
        with:
          commit_message: "chore: sync roadmap status [skip ci]"
          file_pattern: ROADMAP.md

      - name: Sync Discord
        if: steps.update.outputs.changed == 'true'
        run: python scripts/roadmap/sync_discord.py
        env:
          DISCORD_WEBHOOK_URL: ${{ secrets.DISCORD_WEBHOOK_URL }}
          DISCORD_MESSAGE_IDS: ${{ vars.DISCORD_MESSAGE_IDS }}

  reconcile:
    if: github.event_name == 'workflow_dispatch' || github.event_name == 'schedule'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          ref: main
          token: ${{ secrets.ROADMAP_PAT }}

      - uses: actions/setup-python@v5
        with:
          python-version: "3.12"

      - name: Reconcile ROADMAP.md with issue states
        id: update
        run: python scripts/roadmap/reconcile_roadmap.py
        env:
          GITHUB_REPOSITORY: ${{ github.repository }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Commit ROADMAP.md
        if: steps.update.outputs.changed == 'true'
        uses: stefanzweifel/git-auto-commit-action@v5
        with:
          commit_message: "chore: reconcile roadmap status [skip ci]"
          file_pattern: ROADMAP.md

      - name: Sync Discord
        if: steps.update.outputs.changed == 'true'
        run: python scripts/roadmap/sync_discord.py
        env:
          DISCORD_WEBHOOK_URL: ${{ secrets.DISCORD_WEBHOOK_URL }}
          DISCORD_MESSAGE_IDS: ${{ vars.DISCORD_MESSAGE_IDS }}