update-dependency-checksums.yml

name: UpdateChecksums
on:
  workflow_dispatch:

permissions: read-all

jobs:
  build:
    name: Dependency checksum compaction action
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
        with:
          fetch-depth: 0
          token: ${{ secrets.PUBLISH_KEY }}
      - name: Set up JDK 17
        uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1
        with:
          distribution: temurin
          java-version: 17
      - name: Remove previous version
        run: cp gradle/verification-metadata-clean.xml gradle/verification-metadata.xml
      - name: Setup Gradle
        uses: gradle/actions/setup-gradle@db19848a5fa7950289d3668fb053140cf3028d43 # v3.3.2
        with:
          cache-disabled: true
      - name: Update checksums
        run: ./gradlew help licensee --write-verification-metadata sha256
      - name: Git commit
        run: |
          git config --global user.name 'Esta Nagy'
          git config --global user.email 'nagyesta@gmail.com'
          git checkout -b feature/update-dependency-checksums-${{ github.run_number }}
          git add gradle/verification-metadata.xml
          git commit -asm "Updating dependency checksums {patch}"
          git push -f --set-upstream origin feature/update-dependency-checksums-${{ github.run_number }}
      - name: Create PR
        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
        with:
          github-token: ${{ secrets.PUBLISH_KEY }}
          script: |
            github.rest.pulls.create({
              owner: "${{ github.repository_owner }}",
              repo: "lowkey-vault",
              head: "feature/update-dependency-checksums-${{ github.run_number }}",
              base: "main",
              title: "Updating dependency checksums {patch}"
            });