upgrade-provider.yml

# WARNING: This file is autogenerated - changes will be overwritten if not made via https://github.com/pulumi/ci-mgmt

name: Upgrade provider
on:
  workflow_dispatch:
    inputs:
      version:
        description: |
          The version of the upstream provider to upgrade to, without the 'v' prefix
          
          If no version is specified, it will be inferred from the upstream provider's release tags.
        required: false
        type: string
  schedule:
    # 3 AM UTC ~ 8 PM PDT / 7 PM PST daily. Time chosen to run during off hours.
    - cron: 0 3 * * *

env:
  GH_TOKEN: ${{ secrets.PULUMI_BOT_TOKEN }}
  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
jobs:
  upgrade_provider:
    name: upgrade-provider
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repo
        uses: actions/checkout@v4
        with:
          # Persist credentials so upgrade-provider can push a new branch.
          persist-credentials: true
      - name: Setup tools
        uses: ./.github/actions/setup-tools
        with:
          tools: pulumictl, pulumicli, go, nodejs, dotnet, python, java
      - name: Install upgrade-provider
        run: go install github.com/pulumi/upgrade-provider@main
        shell: bash
      - name: "Set up git identity"
        run: |
          git config --global user.name 'bot@pulumi.com'
          git config --global user.email 'bot@pulumi.com'
        shell: bash
      - name: Create issues for new upstream version
        if: inputs.version == ''
        id: upstream_version
        # This step outputs `latest_version` if there is a pending upgrade
        run: upgrade-provider "$REPO" --kind=check-upstream-version
        env:
          REPO: ${{ github.repository }}
        shell: bash
      - name: Calculate target version
        id: target_version
        # Prefer the manually specified version if it exists
        # upstream_version will be empty if the provider is up-to-date
        run: echo "version=${{ github.event.inputs.version || steps.upstream_version.outputs.latest_version }}" >> "$GITHUB_OUTPUT"
        shell: bash
      - name: Attempt provider upgrade
        # Only attempt the upgrade if we have a target version
        if: steps.target_version.outputs.version != ''
        run: upgrade-provider "${{ github.repository }}" --kind="all" --target-version="${{ steps.target_version.outputs.version }}" 
        shell: bash