add github actions

2026-09-12 22:36:10 +05:30
parent da86a4f937
commit 52b0f2e5ac
5 changed files with 513 additions and 0 deletions
@@ -0,0 +1,93 @@
+name: Rebase PR
+
+on:
+  issue_comment:
+    types: [created]
+  workflow_dispatch: # Enable manual triggering
+    inputs:
+      branch:
+        description: 'Select the branch to rebase the PR too'
+        required: true
+
+jobs:
+  check-comment:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: read
+    outputs:
+      is_rebase: ${{ steps.check-rebase.outputs.is_rebase }}
+    steps:
+      - name: Check comment is rebase
+        if: ${{ github.event.issue.pull_request }} && startsWith(github.event.comment.body || '', '/rebase')
+        id: check-rebase
+        run: |
+          echo "User Comment: $COMMENT_BODY"
+          echo "is_rebase=true" >> $GITHUB_OUTPUT
+        env:
+            GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+            COMMENT_BODY: ${{ github.event.comment.body }}
+            GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  rebase:
+    needs: check-comment
+    if: ${{ needs.check-comment.outputs.is_rebase }}
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+      id-token: write
+    steps:
+      - name: Check user permissions
+        id: check-permissions
+        run: |
+          USER_LOGIN="${{ github.event.comment.user.login }}"
+          COLLABORATORS=$(gh api "/repos/${{ github.repository }}/collaborators" \
+            --jq '.[] | select(.permissions.admin == true or .permissions.maintain == true or .permissions.push == true) | .login')
+          if [[ "$COLLABORATORS" =~ "$USER_LOGIN" ]]; then
+            echo "is_authorized=true" >> $GITHUB_OUTPUT
+          else
+            echo "::error::User $USER_LOGIN lacks required permissions"
+            gh pr comment ${{ github.event.issue.number }} --body "$USER_LOGIN lacks required permissions. Please contact a maintainer."
+            exit 1
+          fi
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install GitHub CLI
+        run: |
+          sudo apt-get update
+          sudo apt-get install gh
+          echo "gh cli installed"
+
+      - name: Find latest release branch
+        id: find_release_branch
+        run: |
+          git fetch origin
+          LATEST_BRANCH=$(git branch -r | grep 'origin/release-v' | sed 's/origin\///' | sort -V | tail -n 1)
+          echo "Latest release branch: $LATEST_BRANCH"
+          echo "latest_branch=$LATEST_BRANCH" >> $GITHUB_OUTPUT
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Rebase current PR onto latest release branch
+        if: ${{ needs.check-comment.outputs.is_rebase }} && steps.check-permissions.outputs.is_authorized == 'true'
+        run: |
+          # Configure Git
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+          git config --global user.name "GitHub Actions Bot"
+
+          echo "going to branch: $TARGET_BRANCH"
+          git fetch origin $TARGET_BRANCH
+          #git rebase origin/$TARGET_BRANCH
+          gh pr edit ${{ github.event.issue.number }} --base $TARGET_BRANCH
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          REPO: ${{ github.event.repository.name }}
+          TARGET_BRANCH: ${{ steps.find_release_branch.outputs.latest_branch }}