|
| 1 | +--- |
| 2 | +name: "Check PR" |
| 3 | +on: pull_request |
| 4 | + |
| 5 | +permissions: |
| 6 | + pull-requests: write |
| 7 | + |
| 8 | +jobs: |
| 9 | + check-pr: |
| 10 | + runs-on: ubuntu-latest |
| 11 | + steps: |
| 12 | + - name: Check commits |
| 13 | + shell: bash |
| 14 | + run: | |
| 15 | + set -euo pipefail |
| 16 | + IFS=$'\n\t' |
| 17 | + # Check the commits |
| 18 | + commits_json=$(curl -fsSL -H "Authorization: token ${GITHUB_TOKEN}" "${PR_COMMITS_URL}") |
| 19 | + echo -n 'Commits: ' |
| 20 | + echo "${commits_json}" | jq '.' |
| 21 | + commit_count="$(echo "${commits_json}" | jq -r 'length')" |
| 22 | + # Check first commit message (except for dependabot who is inconsistent) |
| 23 | + if [ "${commit_count}" -eq 1 ] && [ "${GITHUB_ACTOR}" != 'dependabot[bot]' ] ; then |
| 24 | + commit_title="$(echo "${commits_json}" | jq -r '.[0].commit.message' | head -n 1)" |
| 25 | + echo "Commit title: ${commit_title}" |
| 26 | + if [[ "${commit_title}" != "${PR_TITLE}" ]] ; then |
| 27 | + >&2 echo 'Single commit must have same title as PR.' |
| 28 | + exit 1 |
| 29 | + fi |
| 30 | + fi |
| 31 | + # Check that all commits are signed |
| 32 | + for ((i = 0 ; i < commit_count ; i++ )); do |
| 33 | + if [[ "$(echo "${commits_json}" | jq -r ".[${i}].commit.verification.verified")" == 'false' ]] ; then |
| 34 | + >&2 echo "Commit $(echo "${commits_json}" | jq -r ".[${i}].sha") must be signed." |
| 35 | + exit 1 |
| 36 | + fi |
| 37 | + done |
| 38 | + env: |
| 39 | + PR_TITLE: ${{github.event.pull_request.title}} |
| 40 | + PR_COMMITS_URL: ${{github.event.pull_request.commits_url}} |
| 41 | + GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}} |
| 42 | + - name: Update PR labels |
| 43 | + shell: bash |
| 44 | + run: | |
| 45 | + set -euo pipefail |
| 46 | + IFS=$'\n\t' |
| 47 | + # Check PR title is a conventional commit message |
| 48 | + regexp='^((build|chore|ci|docs|feat|fix|perf|refactor|style|test)(\([a-zA-Z0-9\-]+\))?)!?: .*$' |
| 49 | + if ! [[ "${PR_TITLE}" =~ ${regexp} ]] ; then |
| 50 | + >&2 echo 'Non conventional PR title.' |
| 51 | + exit 1 |
| 52 | + fi |
| 53 | + scoped_type="${BASH_REMATCH[1]}" |
| 54 | + type="${BASH_REMATCH[2]}" |
| 55 | + add_labels=() |
| 56 | + remove_labels=() |
| 57 | + # Remove the labels we manage |
| 58 | + for label in build chore ci docs feat fix perf refactor test style ; do |
| 59 | + if [[ "${label}" == "${type}" ]]; then |
| 60 | + echo "Label to add: ${label}" |
| 61 | + if [[ "${PR_LABELS}" == *"${label}"* ]] ; then |
| 62 | + echo "Label ${label} already present" |
| 63 | + else |
| 64 | + add_labels+=("${label}") |
| 65 | + fi |
| 66 | + else |
| 67 | + echo "Label to remove: ${label}" |
| 68 | + if [[ "${PR_LABELS}" == *"${label}"* ]] ; then |
| 69 | + remove_labels+=("${label}") |
| 70 | + else |
| 71 | + echo "Label ${label} not present" |
| 72 | + fi |
| 73 | + fi |
| 74 | + done |
| 75 | + # If scope is dependency-related, add 'dependencies' label |
| 76 | + regexp2='^[a-zA-Z0-9]+\([a-zA-Z0-9\-]*deps\)$' |
| 77 | + if [[ "${scoped_type}" =~ ${regexp2} ]] ; then |
| 78 | + echo "Label to add: dependencies" |
| 79 | + if [[ "${PR_LABELS}" == *"dependencies"* ]] ; then |
| 80 | + echo "Label dependencies already present" |
| 81 | + else |
| 82 | + add_labels+=('dependencies') |
| 83 | + fi |
| 84 | + # otherwise do not remove it since we are not the only ones to manage this label (e.g. dependabot) |
| 85 | + fi |
| 86 | + # For certain types/scopes, add 'no-release-notes' label |
| 87 | + if [[ "${type}" == 'chore' \ |
| 88 | + || "${type}" == 'ci' \ |
| 89 | + || "${type}" == 'docs' \ |
| 90 | + || "${type}" == 'style' \ |
| 91 | + || "${type}" == 'test' ]] ; then |
| 92 | + echo "Label to add: no-release-notes" |
| 93 | + if [[ "${PR_LABELS}" == *"no-release-notes"* ]] ; then |
| 94 | + echo "Label no-release-notes already present" |
| 95 | + else |
| 96 | + add_labels+=('no-release-notes') |
| 97 | + fi |
| 98 | + else |
| 99 | + echo "Label to remove: no-release-notes" |
| 100 | + if [[ "${PR_LABELS}" == *"no-release-notes"* ]] ; then |
| 101 | + remove_labels+=('no-release-notes') |
| 102 | + else |
| 103 | + echo "Label no-release-notes not present" |
| 104 | + fi |
| 105 | + fi |
| 106 | + # Update the labels |
| 107 | + function join_by { local IFS="$1"; shift; echo "$*"; } |
| 108 | + if [ ${#add_labels[@]} -eq 0 ] && [ ${#remove_labels[@]} -eq 0 ]; then |
| 109 | + echo 'No label to change' |
| 110 | + elif [ ${#add_labels[@]} -eq 0 ]; then |
| 111 | + echo "Removing labels: $(join_by , "${remove_labels[@]}")" |
| 112 | + gh pr edit "${PR_URL}" --remove-label "$(join_by , "${remove_labels[@]}")" |
| 113 | + elif [ ${#remove_labels[@]} -eq 0 ]; then |
| 114 | + echo "Adding labels: $(join_by , "${add_labels[@]}")" |
| 115 | + gh pr edit "${PR_URL}" --add-label "$(join_by , "${add_labels[@]}")" |
| 116 | + else |
| 117 | + echo "Adding labels: $(join_by , "${add_labels[@]}")" |
| 118 | + echo "Removing labels: $(join_by , "${remove_labels[@]}")" |
| 119 | + gh pr edit "${PR_URL}" --add-label "$(join_by , "${add_labels[@]}")" --remove-label "$(join_by , "${remove_labels[@]}")" |
| 120 | + fi |
| 121 | + env: |
| 122 | + PR_TITLE: ${{github.event.pull_request.title}} |
| 123 | + PR_LABELS: ${{ toJson(github.event.pull_request.labels.*.name) }} |
| 124 | + PR_URL: ${{github.event.pull_request.html_url}} |
| 125 | + GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}} |
0 commit comments