sync-changes-to-release-branch.yml

name: Sync changes to remote release branch

on:
  pull_request:
    branches: [ main ]
    types: [ closed ]

env:
  PR_TEAM_REVIEWERS: |
    nix

jobs:
  sync-changes:
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write
    strategy:
      matrix:
        include:
          - branch: release
            labels: branch/release
      fail-fast: false
    steps:
      - name: Generate GitHub Auth Token
        # https://github.com/tibdex/github-app-token
        id: generate_token
        uses: tibdex/github-app-token@v2.1.0
        with:
          app_id: ${{ secrets.GH_APP_ID }}
          private_key: ${{ secrets.GH_APP_PRIVATE_KEY }}

      - uses: actions/checkout@main
        with:
          ref: ${{ github.event.repository.default_branch }}
          fetch-depth: 0

      - name: Set short git commit SHA
        id: vars
        run: |
          SHA=$(git rev-parse --short ${{ github.event.pull_request.merge_commit_sha }})
          echo "COMMIT_SHORT_SHA=$SHA" >> $GITHUB_ENV

      - name: Confirm git commit SHA output
        run: echo ${{ env.COMMIT_SHORT_SHA }}

      - name: Cherry pick changes into target branch
        # https://github.com/carloscastrojumo/github-cherry-pick-action
        uses: carloscastrojumo/github-cherry-pick-action@main
        with:
          branch: ${{ matrix.branch }}
          labels: |
            git/cherry-pick
            ${{ matrix.labels }}
          team-reviewers: ${{ env.PR_TEAM_REVIEWERS }}
          title: '[cherry-pick] {old_title}'
          body: 'ci: cherry picking #{old_pull_request_id} onto ${{ matrix.branch }}'
          cherry-pick-branch: cherrypick-${{ env.COMMIT_SHORT_SHA }}-${{ matrix.branch }}
        env:
          GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}