authors-and-third-party-notices.yaml

name: Update Authors and Third Party Notices

on:
  # Once a week or on pushes to main
  schedule:
    - cron: "0 3 * * 0"
  push:
    branches:
      - main

jobs:
  update_generated_files:
    name: Update automatically generated files
    runs-on: ubuntu-latest
    env:
      HADRON_DISTRIBUTION: compass
    steps:
      - name: Create Github App Token
        uses: mongodb-js/devtools-shared/actions/setup-bot-token@main
        id: app-token
        with:
          app-id: ${{ vars.DEVTOOLS_BOT_APP_ID }}
          private-key: ${{ secrets.DEVTOOLS_BOT_PRIVATE_KEY }}

      - uses: actions/checkout@v4
        with:
          # don't checkout a detatched HEAD
          ref: ${{ github.head_ref }}

          # this is important so git log can pick up on
          # the whole history to generate the list of AUTHORS
          fetch-depth: "0"
          token: ${{ steps.app-token.outputs.token }}

      - uses: actions/setup-node@v4
        with:
          node-version: 20.16.0
          cache: "npm"

      - name: Install npm@10.2.4
        run: |
          npm install -g npm@10.2.4

      - name: Install Dependencies
        run: |
          npm -v
          npm run bootstrap-ci

      - name: Update AUTHORS
        run: |
          npm run update-authors
          git add AUTHORS

      - name: Update THIRD-PARTY-NOTICES.md
        run: |
          npm run update-third-party-notices
          git add THIRD-PARTY-NOTICES.md

      - name: Update Security Test Summary
        run: |
          npm run update-security-test-summary
          git add docs/security-test-summary.md

      - name: Update tracking-plan.md
        run: |
          npm run update-tracking-plan
          git add docs/tracking-plan.md

      - name: Commit and push
        run: |
          git commit --no-allow-empty -m "chore: update AUTHORS, THIRD-PARTY-NOTICES, Security Test Summary [skip actions]" || true
          git push