updatecli #28668

	name: updatecli
	on:
	release:
	workflow_dispatch:
	push:
	branches: [main]
	pull_request:
	branches: [main]
	schedule:
	# Run every hour
	- cron: "0 * * * *"

	permissions: {}

	jobs:
	updatecli:
	runs-on: ubuntu-latest
	permissions:
	contents: read

	steps:
	- name: "Checkout"
	uses: "actions/checkout@v4"
	- name: "Setup updatecli"
	uses: "updatecli/updatecli-action@v2"
	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version-file: "go.mod"
	id: go
	- name: "Run updatecli in dryrun"
	run: "updatecli compose diff"
	env:
	GITHUB_ACTOR: ${{ github.actor }}
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	- uses: tibdex/github-app-token@v2.1
	id: generate_token
	if: github.ref == 'refs/heads/main'
	with:
	app_id: ${{ secrets.UPDATECLIBOT_APP_ID }}
	private_key: ${{ secrets.UPDATECLIBOT_APP_PRIVKEY }}
	- name: "Run updatecli"
	if: github.ref == 'refs/heads/main'
	run: "updatecli compose apply"
	env:
	GITHUB_ACTOR: ${{ secrets.UPDATECLI_BOT_GITHUB_ACTOR }}
	GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}

Provide feedback