data_pr_close.yml

name: Close or Merge corresponding PR on the data repo

# When a PR with the data_PR tag is closed or merged, this will close the corresponding PR in the data repo.

env:
  TARGET_REPO_API_URL: ${{ github.api_url }}/repos/zama-ai/tfhe-backward-compat-data
  SLACK_CHANNEL: ${{ secrets.SLACK_CHANNEL }}
  SLACK_ICON: https://pbs.twimg.com/profile_images/1274014582265298945/OjBKP9kn_400x400.png
  SLACK_USERNAME: ${{ secrets.BOT_USERNAME }}
  SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}
  PR_BRANCH: ${{ github.head_ref || github.ref_name }}
  CLOSE_TYPE: ${{ github.event.pull_request.merged && 'merge' || 'close' }}

# only trigger on pull request closed events
on:
  pull_request:
    types: [ closed ]

# The same pattern is used for jobs that use the github api:
# - save the result of the API call in the env var "GH_API_RES". Since the var is multiline
# we use this trick: https://docs.github.com/en/actions/using-workflows/workflow-commands-for-github-actions#example-of-a-multiline-string
# - "set +e" will make sure we reach the last "echo EOF" even in case of error
# - "set -o" pipefail makes one line piped command return the error of the first failure
# - 'RES="$?"' and 'exit $RES' are used to return the error code if a command failed. Without it, with "set +e"
# the script will always return 0 because of the "echo EOF".


jobs:
  auto_close_job:
    if: ${{ contains(github.event.pull_request.labels.*.name, 'data_PR') }}
    runs-on: ubuntu-latest
    steps:
    - name: Find corresponding Pull Request in the data repo
      run: |
        {
          set +e
          set -o pipefail
          echo 'TARGET_REPO_PR<<EOF'
          curl --fail-with-body --no-progress-meter -L -X GET \
          -H "Accept: application/vnd.github+json" \
          -H "X-GitHub-Api-Version: 2022-11-28"  \
          ${{ env.TARGET_REPO_API_URL }}/pulls\?head=${{ github.repository_owner }}:${{ env.PR_BRANCH }} | jq -e '.[0]' | sed 's/null/{ "message": "corresponding PR not found" }/'
          RES="$?"
          echo EOF
        } >> "${GITHUB_ENV}"
        exit $RES

    - name: Comment on the PR to indicate the reason of the close
      run: |
        {
          set +e
          set -o pipefail
          echo 'GH_API_RES<<EOF'
          curl --fail-with-body --no-progress-meter -L -X POST \
          -H "Accept: application/vnd.github+json" \
          -H "Authorization: Bearer ${{ secrets.FHE_ACTIONS_TOKEN }}" \
          -H "X-GitHub-Api-Version: 2022-11-28" \
          ${{ fromJson(env.TARGET_REPO_PR).comments_url }} \
          -d '{ "body": "PR ${{ env.CLOSE_TYPE }}d because the corresponding PR in main repo was ${{ env.CLOSE_TYPE }}d: ${{ github.repository }}#${{ github.event.number  }}" }'
          RES="$?"
          echo EOF
        } >> "${GITHUB_ENV}"
        exit $RES

    - name: Merge the Pull Request in the data repo
      if: ${{ github.event.pull_request.merged }}
      run: |
        {
          set +e
          set -o pipefail
          echo 'GH_API_RES<<EOF'
          curl --fail-with-body --no-progress-meter -L -X PUT \
          -H "Accept: application/vnd.github+json" \
          -H "Authorization: Bearer ${{ secrets.FHE_ACTIONS_TOKEN }}" \
          -H "X-GitHub-Api-Version: 2022-11-28" \
          ${{ fromJson(env.TARGET_REPO_PR).url }}/merge \
          -d '{ "merge_method": "rebase" }'
          RES="$?"
          echo EOF
        } >> "${GITHUB_ENV}"
        exit $RES

    - name: Close the Pull Request in the data repo
      if: ${{ !github.event.pull_request.merged }}
      run: |
        {
          set +e
          set -o pipefail
          echo 'GH_API_RES<<EOF'
          curl --fail-with-body --no-progress-meter -L -X PATCH \
          -H "Accept: application/vnd.github+json" \
          -H "Authorization: Bearer ${{ secrets.FHE_ACTIONS_TOKEN }}" \
          -H "X-GitHub-Api-Version: 2022-11-28" \
          ${{ fromJson(env.TARGET_REPO_PR).url }} \
          -d '{ "state": "closed" }'
          RES="$?"
          echo EOF
        } >> "${GITHUB_ENV}"
        exit $RES

    - name: Delete the associated branch in the data repo
      run: |
        {
          set +e
          set -o pipefail
          echo 'GH_API_RES<<EOF'
          curl --fail-with-body --no-progress-meter -L -X DELETE \
          -H "Accept: application/vnd.github+json" \
          -H "Authorization: Bearer ${{ secrets.FHE_ACTIONS_TOKEN }}" \
          -H "X-GitHub-Api-Version: 2022-11-28" \
          ${{ env.TARGET_REPO_API_URL }}/git/refs/heads/${{ env.PR_BRANCH }}
          RES="$?"
          echo EOF
        } >> "${GITHUB_ENV}"
        exit $RES

    - name: Slack Notification
      if: ${{ always() && job.status == 'failure' }}
      continue-on-error: true
      uses: rtCamp/action-slack-notify@4e5fb42d249be6a45a298f3c9543b111b02f7907
      env:
        SLACK_COLOR: ${{ job.status }}
        SLACK_MESSAGE: "Failed to auto-${{ env.CLOSE_TYPE }} PR on data repo: ${{ fromJson(env.GH_API_RES || env.TARGET_REPO_PR).message }}"