fix-labels.yml

name: Fix Release Labels (Maintainers Only)

on:
  # Runs manually by maintainer
  workflow_dispatch:

permissions:
    contents: write
    issues: write
    pull-requests: write
    statuses: write

jobs:
  find-n-fix-release-label:
    name: Find and Fix Release Labels
    runs-on: ubuntu-latest

    steps:
      # Check permissions
      - uses: tspascoal/get-user-teams-membership@v3
        id: permissions
        with:
          username: ${{ github.actor }}
          team: 'ESL Core Maintainers'
          GITHUB_TOKEN: ${{ secrets.PERMISSION_CHECK_TOKEN }}

      - if: ${{ steps.permissions.outputs.isTeamMember == 'true' }}
        name: Access Check Passed
        run: echo ${{ github.actor }} is in 'ESL Core Maintainers' group
      - if: ${{ steps.permissions.outputs.isTeamMember == 'false' }}
        name: Access Denied
        run: exit 1

      - name: Find and fix 'released on @beta' issues without 'released' label
        id: find-issues
        uses: actions/github-script@v7
        with:
          script: |
            const issues = await github.paginate(github.rest.issues.listForRepo, {
              owner: context.repo.owner,
              repo: context.repo.repo,
              labels: 'released on @beta',
              state: 'all'
            });
            const issuesWithoutReleasedLabel = issues.filter(issue => !issue.labels.some(label => label.name === 'released'));
            console.log('Found %d issues without "released" label', issuesWithoutReleasedLabel.length);

            for (const issue of issuesWithoutReleasedLabel) {
              console.log(`Adding 'released' label to issue #${issue.number}`);
              await github.rest.issues.addLabels({
                owner: context.repo.owner,
                repo: context.repo.repo,
                issue_number: issue.number,
                labels: ['released']
              });
              console.log(`Removing 'released on @beta' label from issue #${issue.number}`);
              await github.rest.issues.removeLabel({
                owner: context.repo.owner,
                repo: context.repo.repo,
                issue_number: issue.number,
                name: 'released on @beta'
              });
            }