name: Update @supabase/ssr

on:
  workflow_dispatch:
    inputs:
      version:
        description: 'Version to update to'
        required: true
        type: string
      source:
        description: 'Source of the update'
        required: false
        type: string
        default: 'manual'

permissions:
  pull-requests: write
  contents: write

jobs:
  update-ssr:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
          ref: master

      - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
        name: Install pnpm
        with:
          run_install: false

      - name: Use Node.js
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
        with:
          node-version-file: '.nvmrc'
          cache: 'pnpm'

      - name: Update @supabase/ssr in pnpm-workspace.yaml
        env:
          VERSION: ${{ github.event.inputs.version }}
        run: |
          sed -i "s|'@supabase/ssr': .*|'@supabase/ssr': ${VERSION}|" pnpm-workspace.yaml

          echo "Updated pnpm-workspace.yaml:"
          cat pnpm-workspace.yaml

      - name: Install dependencies
        run: pnpm install --no-frozen-lockfile

      - name: Generate token
        id: app-token
        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
        with:
          client-id: ${{ vars.GH_AUTOFIX_APP_CLIENT_ID }}
          private-key: ${{ secrets.GH_AUTOFIX_PRIVATE_KEY }}
          permission-contents: write
          permission-pull-requests: write

      - name: Create pull request
        uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6.1.0
        with:
          token: ${{ steps.app-token.outputs.token }}
          commit-message: 'feat: update @supabase/ssr to v${{ github.event.inputs.version }}'
          title: 'feat: update @supabase/ssr to v${{ github.event.inputs.version }}'
          body: |
            This PR updates @supabase/ssr to version ${{ github.event.inputs.version }}.

            **Source**: ${{ github.event.inputs.source }}

            **Changes**:
            - Updated @supabase/ssr to ${{ github.event.inputs.version }}
            - Refreshed pnpm-lock.yaml

            This PR was created automatically.
          branch: 'gha/auto-update-ssr-v${{ github.event.inputs.version }}'
          base: 'master'