Check Upstream and Rebase #5
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Check Upstream and Rebase | |
| on: | |
| schedule: | |
| - cron: '0 */6 * * *' # 6時間ごと | |
| workflow_dispatch: | |
| jobs: | |
| check-and-rebase: | |
| runs-on: ubuntu-latest | |
| outputs: | |
| new_tag: ${{ steps.check.outputs.new_tag }} | |
| current_tag: ${{ steps.check.outputs.current_tag }} | |
| ci_tag: ${{ steps.prepare.outputs.ci_tag }} | |
| docker_tag: ${{ steps.prepare.outputs.docker_tag }} | |
| should_build: ${{ steps.check.outputs.should_build }} | |
| rebase_success: ${{ steps.rebase.outputs.rebase_success }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| token: ${{ secrets.GH_PAT }} | |
| - name: Check upstream for new tags | |
| id: check | |
| run: | | |
| UPSTREAM_REPO=mastodon/mastodon | |
| # 自リポジトリの最新タグを取得 (actions-* や upstream-* を除外) | |
| CURRENT_TAG=$(git tag --sort=-v:refname | grep -E '^v?[0-9]+\.[0-9]+\.[0-9]+$' | head -1) | |
| echo "Current tag: $CURRENT_TAG" | |
| # バージョン番号をパース (v4.3.2 -> 4 3 2) | |
| CURRENT_CLEAN=${CURRENT_TAG#v} | |
| IFS='.' read -r CUR_MAJOR CUR_MINOR CUR_PATCH <<< "$CURRENT_CLEAN" | |
| # upstreamの最新タグ一覧を取得し、semver順にソート | |
| UPSTREAM_TAGS=$(gh api repos/$UPSTREAM_REPO/tags --paginate \ | |
| --jq '.[].name' \ | |
| | grep -E '^v?[0-9]+\.[0-9]+\.[0-9]+$' \ | |
| | sort -Vr \ | |
| | head -20) | |
| echo "Upstream tags (sorted):" | |
| echo "$UPSTREAM_TAGS" | |
| # 対象となるタグをフィルタ（現在より新しいもの） | |
| TARGET_TAG="" | |
| while IFS= read -r TAG; do | |
| CLEAN=${TAG#v} | |
| IFS='.' read -r UP_MAJOR UP_MINOR UP_PATCH <<< "$CLEAN" | |
| IS_NEWER=false | |
| if [ "$UP_MAJOR" -gt "$CUR_MAJOR" ]; then | |
| IS_NEWER=true | |
| elif [ "$UP_MAJOR" -eq "$CUR_MAJOR" ] && [ "$UP_MINOR" -gt "$CUR_MINOR" ]; then | |
| IS_NEWER=true | |
| elif [ "$UP_MAJOR" -eq "$CUR_MAJOR" ] && [ "$UP_MINOR" -eq "$CUR_MINOR" ] && [ "$UP_PATCH" -gt "$CUR_PATCH" ]; then | |
| IS_NEWER=true | |
| fi | |
| if [ "$IS_NEWER" = "true" ]; then | |
| TARGET_TAG=$TAG | |
| break # 最新1件のみ処理（複数あれば次回以降に処理） | |
| fi | |
| done <<< "$UPSTREAM_TAGS" | |
| if [ -z "$TARGET_TAG" ]; then | |
| echo "No new upstream tag found." | |
| echo "should_build=false" >> $GITHUB_OUTPUT | |
| else | |
| echo "New upstream tag found: $TARGET_TAG" | |
| echo "new_tag=$TARGET_TAG" >> $GITHUB_OUTPUT | |
| echo "current_tag=$CURRENT_TAG" >> $GITHUB_OUTPUT | |
| echo "should_build=true" >> $GITHUB_OUTPUT | |
| fi | |
| env: | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Prepare branch and tag names | |
| id: prepare | |
| if: steps.check.outputs.should_build == 'true' | |
| run: | | |
| TIMESTAMP=$(date "+%Y%m%d%H%M%S") | |
| NEW_TAG=${{ steps.check.outputs.new_tag }} | |
| VERSION=${NEW_TAG#v} | |
| # actions-v4.5.9-YYYYMMDDHHMMSS | |
| CI_TAG="actions-${NEW_TAG}-${TIMESTAMP}" | |
| # 4.5.9-YYYYMMDDHHMMSS (Docker タグ) | |
| DOCKER_TAG="${VERSION}-${TIMESTAMP}" | |
| echo "ci_tag=$CI_TAG" >> $GITHUB_OUTPUT | |
| echo "docker_tag=$DOCKER_TAG" >> $GITHUB_OUTPUT | |
| echo "CI tag: $CI_TAG" | |
| echo "Docker tag: $DOCKER_TAG" | |
| - name: Add upstream remote and fetch | |
| if: steps.check.outputs.should_build == 'true' | |
| run: | | |
| git remote add upstream https://github.com/mastodon/mastodon.git || true | |
| git fetch upstream --tags | |
| - name: Create upstream branch | |
| if: steps.check.outputs.should_build == 'true' | |
| run: | | |
| NEW_TAG=${{ steps.check.outputs.new_tag }} | |
| UPSTREAM_BRANCH="upstream-${NEW_TAG}" | |
| # upstream-v4.5.9 ブランチをupstreamタグから作成(-f で上書き) | |
| git checkout -B "$UPSTREAM_BRANCH" "refs/tags/$NEW_TAG" | |
| git push origin "$UPSTREAM_BRANCH" --force | |
| echo "Pushed branch: $UPSTREAM_BRANCH" | |
| # handon-production に戻る | |
| git checkout handon-production | |
| - name: Create CI branch and rebase | |
| if: steps.check.outputs.should_build == 'true' | |
| id: rebase | |
| run: | | |
| NEW_TAG=${{ steps.check.outputs.new_tag }} | |
| CI_TAG=${{ steps.prepare.outputs.ci_tag }} | |
| UPSTREAM_BRANCH="upstream-${NEW_TAG}" | |
| git config user.name "github-actions[bot]" | |
| git config user.email "github-actions[bot]@users.noreply.github.com" | |
| # handon-production から CI ブランチを作成 | |
| git checkout -b "$CI_TAG" | |
| # upstream ブランチにrebase (build-taged-release.sh と同じ流れ) | |
| if git rebase "$UPSTREAM_BRANCH"; then | |
| echo "rebase_success=true" >> $GITHUB_OUTPUT | |
| echo "Rebase succeeded!" | |
| else | |
| echo "rebase_success=false" >> $GITHUB_OUTPUT | |
| git rebase --abort | |
| echo "Rebase failed!" | |
| fi | |
| - name: Push CI branch and update handon-production | |
| if: steps.check.outputs.should_build == 'true' && steps.rebase.outputs.rebase_success == 'true' | |
| run: | | |
| CI_TAG=${{ steps.prepare.outputs.ci_tag }} | |
| NEW_TAG=${{ steps.check.outputs.new_tag }} | |
| # CI ブランチをpush | |
| git push origin "$CI_TAG" | |
| # actions-v4.5.9-YYYYMMDDHHMMSS タグを打つ (refs/tags/ を明示してブランチ名と衝突回避) | |
| git tag "$CI_TAG" | |
| git push origin "refs/tags/$CI_TAG" | |
| # handon-production を force update | |
| git push origin "HEAD:handon-production" --force | |
| - name: Create issue on rebase failure | |
| if: steps.check.outputs.should_build == 'true' && steps.rebase.outputs.rebase_success == 'false' | |
| uses: actions/github-script@v7 | |
| with: | |
| script: | | |
| const newTag = '${{ steps.check.outputs.new_tag }}'; | |
| const currentTag = '${{ steps.check.outputs.current_tag }}'; | |
| await github.rest.issues.create({ | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| title: `🚨 Rebase failed: upstream ${newTag}`, | |
| body: `## Rebase Conflict Detected\n\n` + | |
| `- **Current tag**: \`${currentTag}\`\n` + | |
| `- **Upstream tag**: \`${newTag}\`\n` + | |
| `- **Run**: ${context.serverUrl}/${context.repo.owner}/${context.repo.repo}/actions/runs/${context.runId}\n\n` + | |
| `## 手順\n` + | |
| `\`\`\`bash\n` + | |
| `git fetch upstream\n` + | |
| `git checkout -B upstream-${newTag} refs/tags/${newTag}\n` + | |
| `git checkout handon-production\n` + | |
| `git rebase upstream-${newTag}\n` + | |
| `# conflict解消後\n` + | |
| `git push origin HEAD:handon-production --force\n` + | |
| `\`\`\`\n\n` + | |
| `解消後は workflow_dispatch で build をトリガーしてください。`, | |
| labels: ['rebase-conflict', 'upstream-update'] | |
| }); | |
| build-and-push: | |
| needs: check-and-rebase | |
| if: needs.check-and-rebase.outputs.should_build == 'true' && needs.check-and-rebase.outputs.rebase_success == 'true' | |
| uses: ./.github/workflows/build-container-image.yml | |
| with: | |
| file_to_build: Dockerfile | |
| push_to_images: ghcr.io/${{ github.repository }} | |
| cache: false | |
| flavor: | | |
| latest=true | |
| tags: | | |
| type=raw,value=${{ needs.check-and-rebase.outputs.docker_tag }} | |
| secrets: inherit | |
| build-and-push-streaming: | |
| needs: check-and-rebase | |
| if: needs.check-and-rebase.outputs.should_build == 'true' && needs.check-and-rebase.outputs.rebase_success == 'true' | |
| uses: ./.github/workflows/build-container-image.yml | |
| with: | |
| file_to_build: streaming/Dockerfile | |
| push_to_images: ghcr.io/${{ github.repository }}-streaming | |
| cache: false | |
| flavor: | | |
| latest=true | |
| tags: | | |
| type=raw,value=${{ needs.check-and-rebase.outputs.docker_tag }} | |
| secrets: inherit | |
| trigger-gitops: | |
| needs: | |
| - check-and-rebase | |
| - build-and-push | |
| - build-and-push-streaming | |
| if: needs.check-and-rebase.outputs.should_build == 'true' && needs.check-and-rebase.outputs.rebase_success == 'true' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Trigger GitOps update | |
| uses: peter-evans/repository-dispatch@v3 | |
| with: | |
| token: ${{ secrets.GH_PAT }} | |
| repository: highemerly/k8sg1-repo | |
| event-type: mastodon-image-updated | |
| client-payload: | | |
| { | |
| "image": "ghcr.io/${{ github.repository }}", | |
| "tag": "${{ needs.check-and-rebase.outputs.docker_tag }}" | |
| } |