From 1734e79a4078dc18e4f4b38605031dae36cdd1d5 Mon Sep 17 00:00:00 2001
From: Timo Behrendt <t.behrendt@t00n.de>
Date: Fri, 24 Jul 2026 18:32:35 +0200
Subject: [PATCH] ci: add workflow to add autobumps (#102)

Reviewed-on: https://gitea.t000-n.de/t.behrendt/renovate-configs/pulls/102
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
---
 .gitea/workflows/add-autobump.yaml | 156 +++++++++++++++++++++++++++++
 1 file changed, 156 insertions(+)
 create mode 100644 .gitea/workflows/add-autobump.yaml

diff --git a/.gitea/workflows/add-autobump.yaml b/.gitea/workflows/add-autobump.yaml
new file mode 100644
index 0000000..fe2b301
--- /dev/null
+++ b/.gitea/workflows/add-autobump.yaml
@@ -0,0 +1,156 @@
+name: Add autobump
+
+on:
+  workflow_dispatch:
+    inputs:
+      description:
+        description: Description for the package rule
+        required: true
+        type: string
+      ecosystem:
+        description: Ecosystem
+        required: true
+        type: choice
+        options:
+          - action
+          - golang
+          - bun-npm
+      matchUpdateType:
+        description: Update type to allow
+        required: true
+        type: choice
+        default: major
+        options:
+          - major
+          - minor
+          - patch
+      matchPackageName:
+        description: Package name to allow autobump for
+        required: true
+        type: string
+      matchNewValue:
+        description: New value pattern (e.g. v7.* or v7.0.0)
+        required: true
+        type: string
+
+jobs:
+  allow-autobump:
+    name: Allow autobump
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          token: ${{ secrets.GITEA_TOKEN }}
+      - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
+        with:
+          bun-version-file: ".bun-version"
+      - run: bun install --frozen-lockfile
+      - name: Add package rule
+        id: rule
+        env:
+          DESCRIPTION: ${{ inputs.description }}
+          ECOSYSTEM: ${{ inputs.ecosystem }}
+          MATCH_UPDATE_TYPE: ${{ inputs.matchUpdateType }}
+          MATCH_PACKAGE_NAME: ${{ inputs.matchPackageName }}
+          MATCH_NEW_VALUE: ${{ inputs.matchNewValue }}
+        run: |
+          set -euo pipefail
+
+          FILE="${ECOSYSTEM}.json"
+          if [[ ! -f "${FILE}" ]]; then
+            echo "::error::Config file ${FILE} does not exist"
+            exit 1
+          fi
+
+          MATCH_MANAGERS="$(jq -nc --arg e "${ECOSYSTEM}" '{
+            "action": ["github-actions"],
+            "golang": ["gomod"],
+            "helm": ["helm-values"],
+            "k8s": ["kubernetes"],
+            "bun-npm": ["npm", "bun"],
+            "docker-compose": ["docker-compose"]
+          }[$e]')"
+
+          if [[ "${MATCH_MANAGERS}" == "null" || -z "${MATCH_MANAGERS}" ]]; then
+            echo "::error::Unknown ecosystem: ${ECOSYSTEM}"
+            exit 1
+          fi
+
+          if [[ -z "${DESCRIPTION}" ]]; then
+            DESCRIPTION="Automerge ${MATCH_UPDATE_TYPE} updates for ${MATCH_PACKAGE_NAME} to ${MATCH_NEW_VALUE}"
+          fi
+
+          jq \
+            --arg desc "${DESCRIPTION}" \
+            --argjson managers "${MATCH_MANAGERS}" \
+            --arg updateType "${MATCH_UPDATE_TYPE}" \
+            --arg packageName "${MATCH_PACKAGE_NAME}" \
+            --arg newValue "${MATCH_NEW_VALUE}" \
+            '
+            .packageRules = ((.packageRules // []) + [{
+              description: $desc,
+              matchManagers: $managers,
+              matchUpdateTypes: [$updateType],
+              matchPackageNames: [$packageName],
+              matchNewValue: $newValue,
+              automerge: true,
+              platformAutomerge: true,
+              automergeType: "pr",
+              addLabels: ["automerge"]
+            }])
+            ' "${FILE}" > "${FILE}.tmp"
+          mv "${FILE}.tmp" "${FILE}"
+
+          SAFE_PKG="$(printf '%s' "${MATCH_PACKAGE_NAME}" | tr '/:' '--' | tr -cd '[:alnum:]._-')"
+          SAFE_VAL="$(printf '%s' "${MATCH_NEW_VALUE}" | tr '/:*' '---' | tr -cd '[:alnum:]._-')"
+          BRANCH="chore/allow-autobump-${ECOSYSTEM}-${SAFE_PKG}-${SAFE_VAL}"
+          TITLE="feat(${ECOSYSTEM}): allow automerge of ${MATCH_PACKAGE_NAME} ${MATCH_NEW_VALUE}"
+
+          {
+            echo "file=${FILE}"
+            echo "branch=${BRANCH}"
+            echo "title=${TITLE}"
+            echo "description=${DESCRIPTION}"
+          } >> "${GITHUB_OUTPUT}"
+      - run: bun run fmt
+      - name: Create pull request
+        env:
+          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
+          FILE: ${{ steps.rule.outputs.file }}
+          BRANCH: ${{ steps.rule.outputs.branch }}
+          TITLE: ${{ steps.rule.outputs.title }}
+          DESCRIPTION: ${{ steps.rule.outputs.description }}
+          SERVER_URL: ${{ github.server_url }}
+          REPOSITORY: ${{ github.repository }}
+          DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
+        run: |
+          set -euo pipefail
+
+          git config user.name "gitea-actions"
+          git config user.email "gitea-actions@noreply.local"
+
+          git checkout -b "${BRANCH}"
+          git add "${FILE}"
+          git commit -m "${TITLE}"
+          git push -u origin "HEAD:${BRANCH}"
+
+          BODY="$(printf 'Allow Renovate to automerge updates matching:\n\n- **Ecosystem:** `%s`\n- **Package:** `%s`\n- **Update type:** `%s`\n- **New value:** `%s`\n\n%s\n' \
+            "${{ inputs.ecosystem }}" \
+            "${{ inputs.matchPackageName }}" \
+            "${{ inputs.matchUpdateType }}" \
+            "${{ inputs.matchNewValue }}" \
+            "${DESCRIPTION}")"
+
+          RESPONSE="$(curl -sfS -X POST \
+            -H "Authorization: token ${GITEA_TOKEN}" \
+            -H "Content-Type: application/json" \
+            "${SERVER_URL}/api/v1/repos/${REPOSITORY}/pulls" \
+            -d "$(jq -n \
+              --arg title "${TITLE}" \
+              --arg head "${BRANCH}" \
+              --arg base "${DEFAULT_BRANCH}" \
+              --arg body "${BODY}" \
+              '{title: $title, head: $head, base: $base, body: $body}')")"
+
+          PR_URL="$(printf '%s' "${RESPONSE}" | jq -r '.html_url')"
+          echo "Created pull request: ${PR_URL}"