bump-api-schema-sha.yml

name: Bump API Schema SHA
on:
  # This could be run manually, but the general expectation is that this fires
  # from GHA in getsentry/sentry-api-schema on changes there. See:
  #
  #   https://develop.sentry.dev/api/public/#build-process

  workflow_dispatch:
jobs:
  release:
    runs-on: ubuntu-latest
    name: 'Bump API Schema SHA'
    steps:
      - uses: actions/checkout@v4.1.1
      - name: Get auth token
        id: token
        uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1.11.0
        with:
          app-id: ${{ vars.SENTRY_INTERNAL_APP_ID }}
          private-key: ${{ secrets.SENTRY_INTERNAL_APP_PRIVATE_KEY }}
      - name: 'Bump API Schema SHA'
        shell: bash
        env:
          # An elevated token is necessary because with plain github.token
          # GitHub does not recursively call workflows, which means CI does not
          # kick off for the PR we're about to create.
          GITHUB_TOKEN: ${{ steps.token.outputs.token }}
        run: |
          set -euo pipefail

          git config user.email "bot@getsentry.com"
          git config user.name "openapi-getsentry-bot"

          filepath="src/build/resolveOpenAPI.ts"

          sha="$(curl -sSl -H 'Accept: application/vnd.github.VERSION.sha' 'https://api.github.com/repos/getsentry/sentry-api-schema/commits/main')"
          echo "Latest commit to 'getsentry/sentry-api-schema' is $sha"

          sed -i -e "s|^const SENTRY_API_SCHEMA_SHA =.*$|const SENTRY_API_SCHEMA_SHA = '$sha';|g" "$filepath"
          echo "Updated $filepath"

          branch="bot/bump-api-schema-to-${sha:0:8}"
          git checkout -b "$branch"
          git add "$filepath"
          git commit -m "Bump API schema to ${sha:0:8}"
          git push --set-upstream origin "$branch"

          gh pr create --fill
          gh pr merge --squash --auto