Merge pull request #354 from backstage/blam/automate-changeset

Automate changesets for Renovate PR's

.github/workflows/automate_changeset_feedback.yml

@@ -36,7 +36,7 @@ jobs:
       - name: fetch base
         run: git fetch --depth 1 origin ${{ github.base_ref }}
 
-      - uses: backstage/actions/[email protected].8
+      - uses: backstage/actions/[email protected].9
         name: Generate feedback
         with:
           diff-ref: 'origin/main'

.github/workflows/automate_renovate_changesets.yml

@@ -0,0 +1,32 @@
+name: Automate Renovate changeset
+on:
+  pull_request_target:
+    paths:
+      - '.github/workflows/automate_renovate_changesets.yml'
+      - '**/yarn.lock'
+
+jobs:
+  generate-changeset:
+    runs-on: ubuntu-latest
+    if: github.actor == 'renovate[bot]' && github.repository == 'backstage/community-plugins'
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        with:
+          egress-policy: audit
+
+      - name: Checkout
+        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+        with:
+          fetch-depth: 2
+          ref: ${{ github.head_ref }}
+          token: ${{ secrets.GH_SERVICE_ACCOUNT_TOKEN }}
+      - name: Configure Git
+        run: |
+          git config --global user.email [email protected]
+          git config --global user.name 'Github changeset workflow'
+
+      - name: Generate feedback
+        uses: backstage/actions/[email protected]
+        with:
+          multiple-workspaces: true

.github/workflows/cron.yml

@@ -13,7 +13,7 @@ jobs:
         with:
           egress-policy: audit
 
-      - uses: backstage/actions/cron@af61233abb88019335b07ab855873d991f43d25a # v0.6.7
+      - uses: backstage/actions/[email protected].9
         with:
           app-id: ${{ secrets.BACKSTAGE_GOALIE_APPLICATION_ID }}
           private-key: ${{ secrets.BACKSTAGE_GOALIE_PRIVATE_KEY }}

.github/workflows/pr.yml

@@ -23,7 +23,7 @@ jobs:
           egress-policy: audit
 
       - name: PR sync
-        uses: backstage/actions/pr-sync@af61233abb88019335b07ab855873d991f43d25a # v0.6.7
+        uses: backstage/actions/[email protected].9
         with:
           github-token: ${{ secrets.GH_SERVICE_ACCOUNT_TOKEN  }}
           app-id: ${{ secrets.BACKSTAGE_GOALIE_APPLICATION_ID }}