pull-request-helper.yml

name: Pull request helper
on:
  pull_request:
    types: [opened, synchronize, reopened]

permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number }}
  cancel-in-progress: true

jobs:
  pull-request-helper:
    if: >-
      github.event.pull_request.user.login == 'dependabot[bot]' &&
      github.event.pull_request.head.repo.id == github.event.repository.id
    runs-on: ubuntu-latest
    steps:
      - name: Checkout exact PR head
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          ref: ${{ github.event.pull_request.head.sha }}
          persist-credentials: false

      - name: Setup Gradle
        uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
        with:
          cache-read-only: true

      - name: Update lock files
        run: ./gradlew resolveAndLockAll --write-locks

      - name: Update license report
        run: ./gradlew generateLicenseReport --no-build-cache

      - name: Create generated-file patch
        id: patch
        run: |
          git add '*.lockfile' licenses/
          if git diff --cached --quiet; then
            exit 0
          fi
          git diff --cached > "$RUNNER_TEMP/changes.patch"
          echo "changed=true" >> "$GITHUB_OUTPUT"

      - name: Upload generated changes
        if: steps.patch.outputs.changed == 'true'
        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
        with:
          name: pr-helper-${{ github.run_id }}-${{ github.run_attempt }}
          path: ${{ runner.temp }}/changes.patch
          if-no-files-found: error