updatecli #14300

	name: updatecli
	on:
	workflow_dispatch:
	push:
	pull_request:
	schedule:
	# * is a special character in YAML so you have to quote this string
	# Run every hour
	- cron: '0 * * * *'
	jobs:
	updatecli:
	runs-on: ubuntu-latest
	steps:
	- name: "Checkout"
	uses: "actions/checkout@v4"
	- name: "Setup updatecli"
	uses: "updatecli/updatecli-action@v2"
	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version-file: 'go.mod'
	check-latest: true
	id: go
	- name: Login with Udash
	run: "updatecli udash login --experimental --oauth-access-token $UDASH_ACCESS_TOKEN $UDASH_URL"
	if: github.ref == 'refs/heads/main'
	env:
	UDASH_ACCESS_TOKEN: ${{ secrets.UDASH_ACCESS_TOKEN }}
	UDASH_URL: ${{ vars.UDASH_URL }}
	- name: "Run updatecli in dryrun"
	run: "updatecli compose diff"
	env:
	GITHUB_ACTOR: ${{ github.actor }}
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	- uses: tibdex/[email protected]
	id: generate_token
	if: github.ref == 'refs/heads/main'
	with:
	app_id: ${{ secrets.UPDATECLIBOT_APP_ID }}
	private_key: ${{ secrets.UPDATECLIBOT_APP_PRIVKEY }}
	- name: "Run updatecli"
	if: github.ref == 'refs/heads/main'
	run: "updatecli compose apply"
	env:
	GITHUB_ACTOR: ${{ secrets.UPDATECLI_BOT_GITHUB_ACTOR }}
	GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
	- name: Logout from Udash
	if: github.ref == 'refs/heads/main'
	run: "updatecli udash logout --experimental $UDASH_URL"
	env:
	UDASH_URL: ${{ vars.UDASH_URL }}

Provide feedback