autoupdate.yml

name: Auto-update miniforge
on:
  workflow_dispatch:
  schedule:
    - cron: "0 */6 * * *"
jobs:
  createPullRequest:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4
        with:
          ssh-key: ${{ secrets.MINIFORGE_AUTOUPDATE_SSH_PRIVATE_KEY }}
      - name: Run Actions script
        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
        with:
          script: |
            const script = require(`${process.env.GITHUB_WORKSPACE}/.github/workflows/autoupdate.js`)
            console.log(script({github, context}))
      - name: Create Pull Request
        id: cpr
        # This is the v3 tag but for security purposes we pin to the exact commit.
        uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f # 6d6857d36972b65feb161a90e484f2984215f83e
        with:
          commit-message: "Update miniforge version"
          title: "Update miniforge version"
          body: |
            This PR was created by the autoupdate action as it detected that
            the miniforge version has changed and thus should be updated
            in the configuration.
          branch: autoupdate-action
          delete-branch: true