name: Auto-generate stale checked-in files

on:
  push:
    branches:
      - main
      - '[0-9]+.x'
      # The 21.x branch predates support for auto-generation, so we make sure
      # to exclude it.
      - '!21.x'
  workflow_dispatch:

permissions: {}
jobs:
  run:
    permissions:
      contents: write  #  for git push

    if: github.repository == 'protocolbuffers/protobuf'
    runs-on: ubuntu-latest
    name: Refresh stale files

    strategy:
      fail-fast: false   # Don't cancel all jobs if one fails.

    steps:
      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
        with:
          # Note: this token has an expiration date, so if the workflow starts
          # failing then you may need to generate a fresh token.
          token: ${{ secrets.BOT_ACCESS_TOKEN }}
      - name: Configure name and email address in Git
        run: git config user.name "Protobuf Team Bot" && git config user.email "protobuf-team-bot@google.com"
      - name: Commit and push update
        uses: protocolbuffers/protobuf-ci/bazel@v2
        with:
          credentials: ${{ secrets.GAR_SERVICE_ACCOUNT }}
          bazel-cache: staleness
          bash: ci/push_auto_update.sh