name: Snapshots

on:
  schedule:
    - cron: "47 18 * * *"
  workflow_dispatch:
concurrency:
  # Pushing new changes to a branch will cancel any in-progress CI runs
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

# Restrict jobs in this workflow to have no permissions by default; permissions
# should be granted per job as needed using a dedicated `permissions` block
permissions: {}

jobs:
  update:
    permissions:
      contents: write # to fetch and commit code
      actions: write # to manually dispatch checks on the pull request
      pull-requests: write # Create pull requests
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false
      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
        with:
          go-version-file: "go.mod"
          check-latest: true
      - run: ./scripts/run_tests.sh || true
        env:
          TEST_ACCEPTANCE: true
          TEST_VCR_MODE: replaywithnewepisodes
          UPDATE_SNAPS: always
      - uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
        with:
          token: ${{ secrets.PR_TOKEN_BOT }}
          title: "test: update snapshots"
          body: >
            The snapshots have changed, probably due to OSV advisories being changed.

            Please review the differences to make sure that they're expected!
          branch: "bot/update-snapshots"
          author: "osv-robot <osv-robot@google.com>"
          commit-message: "test: update snapshots"