sync-template.yml

name: Sync Template to Plugins

on:
  push:
    branches: [main]
    paths:
      - Dockerfile
      - Makefile
      - CODE_OF_CONDUCT.md
      - CONTRIBUTING.md
      - GOVERNANCE.md
      - SECURITY.md
      - MAINTAINERS.md
  workflow_dispatch:
    inputs:
      dry_run:
        description: Dry run - report drift only, open no PRs
        type: boolean
        default: false
      include_workflows:
        description: Also sync .github/workflows/ files (requires SYNC_TOKEN with workflow scope - PAT from github.com/settings/tokens with repo+workflow scopes)
        type: boolean
        default: false

permissions:
  contents: read

jobs:
  sync:
    name: "Sync ${{ matrix.plugin }}"
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      max-parallel: 8
      matrix:
        plugin:
          - analyzer-conventional
          - analyzer-default
          - condition-generic
          - condition-gitea-actions
          - condition-github-actions
          - condition-gitlab-ci
          - generator-changelog-html
          - generator-changelog-md
          - generator-release-notes
          - hook-email
          - hook-gitplugin
          - hook-jira
          - hook-matrix
          - hook-slack
          - hook-teams
          - provider-bitbucket
          - provider-git
          - provider-gitea
          - provider-github
          - provider-gitlab
          - updater-cargo
          - updater-docker
          - updater-go
          - updater-gradle
          - updater-helm
          - updater-homebrew
          - updater-maven
          - updater-npm
          - updater-nuget
          - updater-python
          - updater-terraform

    steps:
      - name: Check out template
        uses: actions/checkout@v6
        with:
          path: template

      - name: Check out plugin
        uses: actions/checkout@v6
        with:
          repository: "SemRels/${{ matrix.plugin }}"
          token: ${{ secrets.SYNC_TOKEN }}
          path: plugin

      - name: Apply template files
        env:
          PLUGIN: ${{ matrix.plugin }}
          INCLUDE_WORKFLOWS: ${{ inputs.include_workflows || 'false' }}
        shell: bash
        run: |
          set -euo pipefail
          for f in CODE_OF_CONDUCT.md CONTRIBUTING.md; do
            if [ -f "template/$f" ] && [ -f "plugin/$f" ]; then
              sed "s/{{PROJECT_NAME}}/$PLUGIN/g; s/{{DEFAULT_BRANCH}}/main/g" "template/$f" > "plugin/$f"
            fi
          done
          for f in Makefile GOVERNANCE.md SECURITY.md MAINTAINERS.md; do
            if [ -f "template/$f" ] && [ -f "plugin/$f" ]; then
              cp "template/$f" "plugin/$f"
            fi
          done
          if [ -f "template/Dockerfile" ] && [ -f "plugin/Dockerfile" ]; then
            sed "s/plugin-template Authors/$PLUGIN Authors/" "template/Dockerfile" > "plugin/Dockerfile"
          fi
          if [ "$INCLUDE_WORKFLOWS" = "true" ]; then
            for wf in ci.yml release.yml security.yml; do
              if [ -f "template/.github/workflows/$wf" ] && [ -f "plugin/.github/workflows/$wf" ]; then
                cp "template/.github/workflows/$wf" "plugin/.github/workflows/$wf"
              fi
            done
          fi

      - name: Create PR if changes exist
        env:
          GH_TOKEN: ${{ secrets.SYNC_TOKEN }}
          DRY_RUN: ${{ inputs.dry_run || 'false' }}
          PLUGIN: ${{ matrix.plugin }}
          COMMIT_SHA: ${{ github.sha }}
        shell: bash
        run: |
          set -euo pipefail
          cd plugin
          git config user.name  "semrel-sync-bot"
          git config user.email "bot@semrel.io"
          git remote set-url origin "https://x-access-token:${GH_TOKEN}@github.com/SemRels/${PLUGIN}.git"
          if git diff --quiet; then
            echo "OK $PLUGIN - no changes needed"
            exit 0
          fi
          CHANGED=$(git diff --name-only | tr '\n' ' ')
          echo "DRIFT $PLUGIN - $CHANGED"
          if [ "$DRY_RUN" = "true" ]; then
            echo "(dry-run - skipping PR)"
            exit 0
          fi
          SHORT_SHA="${COMMIT_SHA:0:7}"
          BRANCH="chore/sync-template-$(date +%Y%m%d)"
          if git ls-remote --exit-code origin "refs/heads/$BRANCH" > /dev/null 2>&1; then
            echo "Branch $BRANCH already exists - skipping"
            exit 0
          fi
          git checkout -b "$BRANCH"
          git add -A
          git commit -m "chore: sync from plugin-template@${SHORT_SHA} -- $CHANGED"
          git push origin "$BRANCH"
          TITLE="chore: sync from plugin-template"
          BODY="Automated sync from SemRels/plugin-template (${SHORT_SHA}). Updated: $CHANGED"
          gh pr create --repo "SemRels/$PLUGIN" --title "$TITLE" --body "$BODY" --base main || echo "PR may already exist"