update-go.yml

name: update-go

permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

on:
  workflow_dispatch:
  schedule:
    - cron: '0 */6 * * *'

jobs:
  pkgs:
    uses: ./.github/workflows/.pkgs.yml

  build:
    runs-on: ubuntu-24.04
    permissions:
      contents: write
      pull-requests: write
    needs:
      - pkgs
    steps:
      -
        name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      -
        name: Get GO_VERSION from upstream repositories
        id: get-go-versions
        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
        env:
          INPUT_PKGS: ${{ needs.pkgs.outputs.list }}
        with:
          script: |
            const inpPkgs = JSON.parse(core.getInput('pkgs'));
            
            const goVersions = [];
            for (const pkg of inpPkgs) {
              await core.group(`Getting go version for ${pkg} package`, async () => {
                let pkgRepo = '';
                let pkgRef = '';
                let pkgDockerfile = '';
                await exec.getExecOutput('docker', ['buildx', 'bake', `metadata-${pkg}`, '--print'], {
                  ignoreReturnCode: true,
                  silent: true
                }).then(res => {
                  if (res.stderr.length > 0 && res.exitCode != 0) {
                    throw new Error(res.stderr);
                  }
                  const dt = JSON.parse(res.stdout.trim());
                  pkgRepo = dt.target[`metadata-${pkg}`].args.PKG_REPO;
                  pkgRef = dt.target[`metadata-${pkg}`].args.PKG_REF;
                  pkgDockerfile = dt.target[`metadata-${pkg}`].args.PKG_REMOTE_DOCKERFILE;
                });
              
                let goVersion = '';
                core.info(`Fetching GO_VERSION from ${pkgRepo}#${pkgRef}`);
                await exec.getExecOutput('docker', ['buildx', 'build', '--call', 'outline,format=json', '-f', pkgDockerfile, `${pkgRepo}#${pkgRef}`], {
                  ignoreReturnCode: true,
                  silent: true
                }).then(res => {
                  if (res.stderr.length > 0 && res.exitCode != 0) {
                    throw new Error(res.stderr);
                  }
                  const outline = JSON.parse(res.stdout.trim());
                  goVersion = outline.args.find(arg => arg.name === 'GO_VERSION')?.value;
                  if (!goVersion) {
                    core.info(JSON.stringify(outline, null, 2));
                    throw new Error(`GO_VERSION not found in outline args`);
                  }
                  core.info(`Found GO_VERSION: ${goVersion}`);
                });
                goVersions.push({ pkg: pkg, go_version: goVersion });
              });
            }
            
            core.setOutput('list', JSON.stringify(goVersions));
      -
        name: Set GO_VERSION in Dockerfiles
        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
        env:
          INPUT_GO_VERSIONS: ${{ steps.get-go-versions.outputs.list }}
        with:
          script: |
            const fs = require('fs');
            const path = require('path');
            
            const inpGoVersions = JSON.parse(core.getInput('go_versions'));
            
            for (const item of inpGoVersions) {
              const dockerfilePath = path.join('pkg', item.pkg, 'Dockerfile');
              let dockerfileContent = fs.readFileSync(dockerfilePath, 'utf8');
              const dockerfileRegex = /^ARG GO_VERSION=(.*)$/m;
              let goVersion = item.go_version;
              // A Dockerfile pinned to a Go series tracks its latest patch
              // release, so keep it on the series instead of the upstream patch.
              const current = dockerfileContent.match(dockerfileRegex)?.[1] ?? '';
              if (current.replaceAll('"', '').split('.').length === 2) {
                goVersion = goVersion.split('.').slice(0, 2).join('.');
              }
              core.info(`Updating GO_VERSION to ${goVersion} in ${dockerfilePath}`);
              dockerfileContent = dockerfileContent.replace(dockerfileRegex, `ARG GO_VERSION="${goVersion}"`);
              fs.writeFileSync(dockerfilePath, dockerfileContent);
            }
            
            await exec.exec(`git diff --color=always`);
      -
        name: Commit changes
        run: |
          git add -A .
      -
        name: Create PR
        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1  # v8.1.1
        with:
          base: main
          branch: bot/update-go
          signoff: true
          sign-commits: true
          delete-branch: true
          title: "chore: align go version from upstream repositories"
          body: |
            Keep Go versions in sync with upstream repositories.
          draft: false