Files
ps5-linux-image/.github/workflows/upstream-patches-watch.yml

58 lines
2.1 KiB
YAML

name: Upstream patches watch
run-name: Watch ps5-linux-patches for new kernel-* tags
on:
schedule:
- cron: '0 4 * * *'
workflow_dispatch:
permissions:
contents: write
jobs:
check:
runs-on: self-hosted
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
REPO: ${{ github.repository }}
steps:
- name: Bump build_image.sh PATCHES_REF if stale
run: |
set -euo pipefail
# Read build_image.sh from main via API (no checkout — avoids
# EACCES on root-owned build artifacts left in the workspace).
gh api "repos/${REPO}/contents/build_image.sh?ref=main" \
--jq '.content' | base64 -d > build_image.sh
SHA=$(gh api "repos/${REPO}/contents/build_image.sh?ref=main" --jq '.sha')
REPO_URL=$(grep -E '^PATCHES_REPO=' build_image.sh | head -1 | cut -d'"' -f2)
if [ "$REPO_URL" != "https://github.com/ps5-linux/ps5-linux-patches.git" ]; then
echo "PATCHES_REPO is a fork ($REPO_URL) — skipping auto-bump."
exit 0
fi
LATEST=$(gh api repos/ps5-linux/ps5-linux-patches/tags --paginate \
--jq '.[] | select(.name | test("^kernel-[0-9]+\\.[0-9]+\\.[0-9]+-[a-f0-9]+$")) | .name' \
| head -1)
[ -n "$LATEST" ] || { echo "no kernel tags found"; exit 1; }
CUR=$(grep -E '^PATCHES_REF=' build_image.sh | head -1 | cut -d'"' -f2)
echo "upstream latest: $LATEST"
echo "current ref: $CUR"
if [ "$LATEST" = "$CUR" ]; then
echo "already current — no bump."
exit 0
fi
sed -i "s|^PATCHES_REF=\"${CUR}\"|PATCHES_REF=\"${LATEST}\"|" build_image.sh
NEW_B64=$(base64 -w0 < build_image.sh)
gh api -X PUT "repos/${REPO}/contents/build_image.sh" \
-f message="kernel: auto-bump ${CUR} -> ${LATEST}" \
-f content="${NEW_B64}" \
-f sha="${SHA}" \
-f branch=main \
-f committer.name="ps5-linux-bot" \
-f committer.email="ps5-linux-bot@users.noreply.github.com"
echo "pushed bump to ${LATEST}"