authors-and-third-party-notices.yaml

name: Update Authors and Third Party Notices

on:
  # Once a week or on pushes to main
  schedule:
    - cron: "0 3 * * 0"
  push:
    branches:
      - main

jobs:
  update_generated_files:
    name: Update automatically generated files
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
        with:
          # don't checkout a detatched HEAD
          ref: ${{ github.head_ref }}

          # this is important so git log can pick up on
          # the whole history to generate the list of AUTHORS
          fetch-depth: '0'


      - uses: actions/setup-node@v3
        with:
          node-version: 18.19.1
          cache: 'npm'

      - name: Install npm@10.2.4
        run: |
          npm install -g npm@10.2.4

      - name: Install Dependencies
        run: |
          npm -v
          npm run bootstrap-ci

      - name: Update AUTHORS
        run: npm run update-authors

      - name: Update THIRD-PARTY-NOTICES.md
        run: npm run update-third-party-notices

      - name: Update Security Test Summary
        run: |
          npm run update-security-test-summary

      - name: Create Pull Request
        id: cpr
        uses: peter-evans/create-pull-request@v6
        with:
          commit-message: Update report
          branch: ci/update-3rd-party-notices-and-authors
          title: 'chore: update AUTHORS, THIRD-PARTY-NOTICES, Security Test Summary'
          add-paths: |
            THIRD-PARTY-NOTICES.md
            AUTHORS
            docs/security-test-summary.md
          body: |
            - Update `AUTHORS`, `THIRD-PARTY-NOTICES` and `docs/security-test-summary.md`

      - name: Merge PR
        env:
          PULL_REQUEST_NUMBER: ${{steps.cpr.outputs.pull-request-number}}
          # NOTE: we don't use a PAT so to not trigger further automation
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          gh pr merge $PULL_REQUEST_NUMBER --squash --delete-branch
          gh workflow run codeql.yml -r main