use on-push

Author: samisq

.github/actions/nuget-lockfile-sync/action.yml

@@ -0,0 +1,34 @@
+name: 'NuGet Lockfile Sync'
+description: 'Force restore and commit updated NuGet lock files for Dependabot NuGet PRs'
+inputs:
+  dotnet-version:
+    description: 'Dotnet SDK version'
+    required: false
+    default: '9.0.304'
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Setup .NET
+      uses: actions/setup-dotnet@v4
+      with:
+        dotnet-version: ${{ inputs.dotnet-version }}
+
+    - name: Force restore
+      shell: bash
+      run: dotnet restore --force-evaluate
+
+    - name: Commit and Push Changes
+      shell: bash
+      run: |
+        set -euo pipefail
+        git config --global user.name 'dependabot[bot]'
+        git config --global user.email '[email protected]'
+        echo '*****STARTING LOCKFILE SYNC*****'
+        git branch --show-current
+        git status
+        git add -A
+        git commit -m 'Update lock files' || echo 'No changes to commit'
+        BRANCH_NAME="${{ github.head_ref || github.ref_name }}"
+        echo "The branch name is $BRANCH_NAME"
+        git push origin "$BRANCH_NAME"

.github/workflows/build.yml

@@ -14,11 +14,6 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  auto-sync:
-    name: Auto Sync Lock Files (Dependabot only)
-    if: github.event_name == 'pull_request' && github.actor == 'dependabot[bot]' && startsWith(github.head_ref, 'dependabot/nuget/')
-    uses: ./.github/workflows/nuget-lockfile-sync.yml
-
   build:
     name: Build
     runs-on: ubuntu-latest
@@ -27,11 +22,14 @@ jobs:
         uses: actions/checkout@v4
         with:
           ref: ${{ github.head_ref || github.ref }}
+
       - name: Setup .NET
         uses: actions/setup-dotnet@v4
         with:
           dotnet-version: 9.0.304
+
       - name: Restore dependencies
         run: dotnet restore --locked-mode
+
       - name: Build
         run: dotnet build --no-restore

.github/workflows/nuget-lockfile-sync.yml

@@ -1,14 +1,9 @@
 name: Auto Sync Lock Files
 
 on:
-  workflow_call:
-    inputs:
-      dotnet-version:
-        description: 'Dotnet SDK version'
-        required: false
-        type: string
-        default: '9.0.304'
-    secrets: {}
+  push:
+    branches:
+      - 'dependabot/nuget/**'
 
 permissions:
   actions: read
@@ -30,7 +25,7 @@ jobs:
       - name: Setup .NET
         uses: actions/setup-dotnet@v4
         with:
-          dotnet-version: ${{ inputs.dotnet-version }}
+          dotnet-version: 9.0.304
 
       - name: Force restore
         run: dotnet restore --force-evaluate