sync-upstream.yml

---
name: Sync Upstream (Reusable)

on:
  workflow_call:
    inputs:
      upstream-path:
        description: 'Path to upstream submodule'
        required: true
        type: string
      chart-path:
        description: 'Path to chart directory'
        required: true
        type: string
      sync-script:
        description: 'Path to sync script'
        required: false
        type: string
        default: 'scripts/sync.sh'

jobs:
  sync:
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write

    steps:
      - name: Checkout
        uses: actions/checkout@v5
        with:
          submodules: true

      - name: Update submodule and sync
        id: update
        run: |
          cd ${{ inputs.upstream-path }}
          git fetch origin
          LATEST_TAG=$(git describe --tags --abbrev=0 origin/main 2>/dev/null || echo "main")
          git checkout $LATEST_TAG
          echo "tag=${LATEST_TAG}" >> $GITHUB_OUTPUT

          cd "$GITHUB_WORKSPACE"
          chmod +x ${{ inputs.sync-script }}
          ${{ inputs.sync-script }}

      - name: Create Pull Request
        if: success()
        uses: peter-evans/create-pull-request@v7
        with:
          commit-message: "chore: sync upstream to ${{ steps.update.outputs.tag }}"
          title: "Sync upstream to ${{ steps.update.outputs.tag }}"
          body: |
            Automated upstream synchronization to `${{ steps.update.outputs.tag }}`.

            Review and test before merging.
          branch: sync/${{ steps.update.outputs.tag }}
          delete-branch: true
          labels: upstream-sync