wordpress/.gitea/workflows/update-images.yaml

name: Update Docker Image Tags and Release Helm Chart

on:
  schedule:
    - cron: '0 2 * * 1'
  workflow_dispatch:

jobs:
  update-and-release:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v3
        with:
          fetch-depth: 0

      - name: Install Helm
        uses: azure/setup-helm@v3
        with:
          version: 'v3.12.0'

      - name: Check for new nginx version
        id: nginx
        run: |
          CURRENT=$(grep -A2 "nginx:" values.yaml | grep "tag:" | sed 's/.*tag: "\(.*\)"/\1/')
          LATEST=$(curl -s https://registry.hub.docker.com/v2/repositories/library/nginx/tags?page_size=100 | jq -r '.results[].name' | grep -E '^[0-9]+\.[0-9]+\.[0-9]+-alpine-perl$' | sort -V | tail -1)
          echo "current=$CURRENT" >> $GITHUB_OUTPUT
          echo "latest=$LATEST" >> $GITHUB_OUTPUT
          echo "Nginx: $CURRENT -> $LATEST"

      - name: Check for new WordPress version
        id: wordpress
        run: |
          CURRENT=$(grep -A2 "wordpress:" values.yaml | grep "tag:" | sed 's/.*tag: "\(.*\)"/\1/')
          LATEST=$(curl -s https://registry.hub.docker.com/v2/repositories/library/wordpress/tags?page_size=100 | jq -r '.results[].name' | grep -E '^[0-9]+\.[0-9]+\.[0-9]+-php[0-9]+\.[0-9]+-fpm-alpine$' | sort -V | tail -1)
          WP_VERSION=$(echo "$LATEST" | grep -oE '^[0-9]+\.[0-9]+\.[0-9]+')
          echo "current=$CURRENT" >> $GITHUB_OUTPUT
          echo "latest=$LATEST" >> $GITHUB_OUTPUT
          echo "wp_version=$WP_VERSION" >> $GITHUB_OUTPUT
          echo "WordPress: $CURRENT -> $LATEST (version: $WP_VERSION)"

      - name: Determine if update is needed
        id: check_update
        run: |
          if [ "${{ steps.nginx.outputs.current }}" != "${{ steps.nginx.outputs.latest }}" ] || [ "${{ steps.wordpress.outputs.current }}" != "${{ steps.wordpress.outputs.latest }}" ]; then
            echo "update_needed=true" >> $GITHUB_OUTPUT
            echo "Update is needed"
          else
            echo "update_needed=false" >> $GITHUB_OUTPUT
            echo "Already up to date"
          fi

      - name: Update values.yaml
        if: steps.check_update.outputs.update_needed == 'true'
        run: |
          sed -i 's|tag: "${{ steps.nginx.outputs.current }}"|tag: "${{ steps.nginx.outputs.latest }}"|' values.yaml
          sed -i 's|tag: "${{ steps.wordpress.outputs.current }}"|tag: "${{ steps.wordpress.outputs.latest }}"|' values.yaml
          echo "values.yaml updated"

      - name: Update Chart.yaml version
        if: steps.check_update.outputs.update_needed == 'true'
        run: |
          WP_VERSION="${{ steps.wordpress.outputs.wp_version }}"
          sed -i "s/^version: .*/version: $WP_VERSION/" Chart.yaml
          sed -i "s/^appVersion: .*/appVersion: \"$WP_VERSION\"/" Chart.yaml
          echo "Chart.yaml updated to version $WP_VERSION"
          cat Chart.yaml

      - name: Commit changes
        if: steps.check_update.outputs.update_needed == 'true'
        run: |
          git config user.name "GitHub Actions Bot"
          git config user.email "actions@github.com"
          git add values.yaml Chart.yaml
          git commit -m "chore: update to WordPress ${{ steps.wordpress.outputs.wp_version }}"
          git push origin main

      - name: Package Helm Chart
        if: steps.check_update.outputs.update_needed == 'true'
        run: |
          helm package .
          echo "Helm chart packaged"

      - name: Create Git Tag
        if: steps.check_update.outputs.update_needed == 'true'
        run: |
          WP_VERSION="${{ steps.wordpress.outputs.wp_version }}"
          git tag -a "v$WP_VERSION" -m "Release WordPress $WP_VERSION"
          git push origin "v$WP_VERSION"
          echo "Git tag v$WP_VERSION created"

      - name: Create Gitea Release
        if: steps.check_update.outputs.update_needed == 'true'
        env:
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
        run: |
          WP_VERSION="${{ steps.wordpress.outputs.wp_version }}"
          CHART_NAME=$(grep '^name:' Chart.yaml | awk '{print $2}')
          PACKAGE_FILE="${CHART_NAME}-${WP_VERSION}.tgz"
          RELEASE_BODY="WordPress Helm Chart v${WP_VERSION} - Automated release"
          curl -X POST -H "Authorization: token ${GITEA_TOKEN}" -H "Content-Type: application/json" -d "{\"tag_name\":\"v${WP_VERSION}\",\"name\":\"v${WP_VERSION}\",\"body\":\"${RELEASE_BODY}\"}" "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/releases"
          RELEASE_ID=$(curl -s -H "Authorization: token ${GITEA_TOKEN}" "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/releases/tags/v${WP_VERSION}" | jq -r '.id')
          curl -X POST -H "Authorization: token ${GITEA_TOKEN}" -H "Content-Type: application/gzip" --data-binary "@${PACKAGE_FILE}" "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/releases/${RELEASE_ID}/assets?name=${PACKAGE_FILE}"
          echo "Release created"

      - name: Update Helm Repository Index
        if: steps.check_update.outputs.update_needed == 'true'
        run: |
          WP_VERSION="${{ steps.wordpress.outputs.wp_version }}"
          CHART_NAME=$(grep '^name:' Chart.yaml | awk '{print $2}')
          PACKAGE_FILE="${CHART_NAME}-${WP_VERSION}.tgz"
          git fetch origin gh-pages || git checkout --orphan gh-pages
          git checkout gh-pages || (git checkout --orphan gh-pages && git rm -rf .)
          mv "${PACKAGE_FILE}" .
          helm repo index . --url https://gitea.example.com/${GITHUB_REPOSITORY}/raw/branch/gh-pages
          git config user.name "GitHub Actions Bot"
          git config user.email "actions@github.com"
          git add "${PACKAGE_FILE}" index.yaml
          git commit -m "chore: add ${CHART_NAME} v${WP_VERSION}"
          git push origin gh-pages
          echo "Helm repository updated"

      - name: Summary
        if: steps.check_update.outputs.update_needed == 'true'
        run: |
          WP_VERSION="${{ steps.wordpress.outputs.wp_version }}"
          echo "Update completed to version ${WP_VERSION}"