rebar-lock.yml

---
name: Update rebar.lock

"on":
  push:
    branches:
      - main
  pull_request:
    branches:
      - "*"
  workflow_dispatch: {}
  merge_group:

concurrency:
  group: ${{github.workflow}}-${{github.ref}}
  cancel-in-progress: true

jobs:
  branch:
    outputs:
      head_ref: ${{steps.branch.outputs.head_ref}}

    runs-on: ubuntu-24.04

    steps:
      - id: branch
        run: |
          head_ref=${GITHUB_HEAD_REF}
          echo "head_ref is ${head_ref}"
          echo "head_ref=${head_ref}" > "${GITHUB_OUTPUT}"

  update:
    name: Update rebar.lock

    needs: [branch]

    if: endsWith(needs.branch.outputs.head_ref, 'rebar.config-deps')

    runs-on: ubuntu-24.04

    steps:
      - uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1.11.0
        id: app-token
        with:
          app-id: ${{vars.ARIZONA_BOT_APP_ID}}
          private-key: ${{secrets.ARIZONA_BOT_PRIVATE_KEY}}

      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          token: ${{steps.app-token.outputs.token}}
          ref: ${{needs.branch.outputs.head_ref}}

      - uses: erlef/setup-beam@5304e04ea2b355f03681464e683d92e3b2f18451 # v1.18.2
        with:
          version-type: strict
          version-file: .tool-versions

      - run: |
          rebar3 upgrade --all
          if ! git diff --exit-code >/dev/null; then
              # there's stuff to push
              git config user.name "arizona[bot]"
              git config user.email "arizona_bot_@user.noreply.github.com"
              git add rebar.lock
              git commit -m "[automation] update \`rebar.lock\` after Renovate"
              git push
          fi
        env:
          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}