Repository navigation

fix(python): guard function resolution and lock expiry boundaries (#361) #245

	name: Release Please

	on:
	push:
	branches: [main]
	workflow_dispatch:

	permissions:
	contents: read

	concurrency:
	group: release-please
	cancel-in-progress: false

	jobs:
	release:
	if: github.ref == 'refs/heads/main'
	runs-on: ubuntu-latest
	timeout-minutes: 10
	steps:
	# App-created PRs and releases trigger CI and package checks; GITHUB_TOKEN does not.
	- uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
	id: app
	with:
	app-id: ${{ vars.VOLCANO_APP_ID }}
	private-key: ${{ secrets.VOLCANO_APP_KEY }}
	permission-contents: write
	permission-pull-requests: write
	permission-issues: write
	- uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0
	with:
	token: ${{ steps.app.outputs.token }}
	- name: Enable checked auto-merge for release PRs
	shell: bash
	env:
	GH_TOKEN: ${{ steps.app.outputs.token }}
	GH_REPO: ${{ github.repository }}
	# Looking up the branch also handles retries when Release Please leaves the PR unchanged.
	run: \|
	gh pr list --base main --head release-please--branches--main--components--volcano-sdk --state open \
	--json number,author,isCrossRepository,isDraft,headRefOid \
	--jq '.[] \| select(.author.login == "app/kong-volcano-app" and .isCrossRepository == false and .isDraft == false) \| [.number, .headRefOid] \| @tsv' \|
	while IFS=$'\t' read -r number head; do
	gh pr merge "$number" --auto --squash --match-head-commit "$head"
	done