auto-update-Dockerfiles.yml

name: Auto-Update Lambda Dockerfiles Daily

permissions:
  contents: write
  pull-requests: write

on:
  # Run daily at midnight UTC
  schedule:
    - cron: '0 0 * * *'
  # Allows to run this workflow manually from the Actions tab for testing
  workflow_dispatch:

jobs:
  auto-update:
    runs-on: ubuntu-latest
    env:
      NET_8_AMD64_Dockerfile: "LambdaRuntimeDockerfiles/Images/net8/amd64/Dockerfile"
      NET_8_ARM64_Dockerfile: "LambdaRuntimeDockerfiles/Images/net8/arm64/Dockerfile"
      NET_9_AMD64_Dockerfile: "LambdaRuntimeDockerfiles/Images/net9/amd64/Dockerfile"
      NET_9_ARM64_Dockerfile: "LambdaRuntimeDockerfiles/Images/net9/arm64/Dockerfile"
      NET_10_AMD64_Dockerfile: "LambdaRuntimeDockerfiles/Images/net10/amd64/Dockerfile"
      NET_10_ARM64_Dockerfile: "LambdaRuntimeDockerfiles/Images/net10/arm64/Dockerfile"
      NET_11_AMD64_Dockerfile: "LambdaRuntimeDockerfiles/Images/net11/amd64/Dockerfile"
      NET_11_ARM64_Dockerfile: "LambdaRuntimeDockerfiles/Images/net11/arm64/Dockerfile"

    steps:
      # Checks-out the repository under $GITHUB_WORKSPACE
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
        with:
          ref: 'dev'

      # Update .NET 8 AMD64 Dockerfile
      - name: Update .NET 8 AMD64
        id: update-net8-amd64
        shell: pwsh
        env:
          DOCKERFILE_PATH: ${{ env.NET_8_AMD64_Dockerfile }}
        run: |
          $version = & "./LambdaRuntimeDockerfiles/get-latest-aspnet-versions.ps1" -MajorVersion "8"
          if (-not [string]::IsNullOrEmpty($version)) {
            & "./LambdaRuntimeDockerfiles/update-dockerfile.ps1" -DockerfilePath "${{ env.DOCKERFILE_PATH }}" -NextVersion $version
          } else {
            Write-Host "Skipping .NET 8 AMD64 update - No version detected"
          }

      # Update .NET 8 ARM64 Dockerfile
      - name: Update .NET 8 ARM64
        id: update-net8-arm64
        shell: pwsh
        env:
          DOCKERFILE_PATH: ${{ env.NET_8_ARM64_Dockerfile }}
        run: |
          $version = & "./LambdaRuntimeDockerfiles/get-latest-aspnet-versions.ps1" -MajorVersion "8"
          if (-not [string]::IsNullOrEmpty($version)) {
            & "./LambdaRuntimeDockerfiles/update-dockerfile.ps1" -DockerfilePath "${{ env.DOCKERFILE_PATH }}" -NextVersion $version
          } else {
            Write-Host "Skipping .NET 8 ARM64 update - No version detected"
          }

      # Update .NET 9 AMD64 Dockerfile
      - name: Update .NET 9 AMD64
        id: update-net9-amd64
        shell: pwsh
        env:
          DOCKERFILE_PATH: ${{ env.NET_9_AMD64_Dockerfile }}
        run: |
          $version = & "./LambdaRuntimeDockerfiles/get-latest-aspnet-versions.ps1" -MajorVersion "9"
          if (-not [string]::IsNullOrEmpty($version)) {
            & "./LambdaRuntimeDockerfiles/update-dockerfile.ps1" -DockerfilePath "${{ env.DOCKERFILE_PATH }}" -NextVersion $version
          } else {
            Write-Host "Skipping .NET 9 AMD64 update - No version detected"
          }

      # Update .NET 9 ARM64 Dockerfile
      - name: Update .NET 9 ARM64
        id: update-net9-arm64
        shell: pwsh
        env:
          DOCKERFILE_PATH: ${{ env.NET_9_ARM64_Dockerfile }}
        run: |
          $version = & "./LambdaRuntimeDockerfiles/get-latest-aspnet-versions.ps1" -MajorVersion "9"
          if (-not [string]::IsNullOrEmpty($version)) {
            & "./LambdaRuntimeDockerfiles/update-dockerfile.ps1" -DockerfilePath "${{ env.DOCKERFILE_PATH }}" -NextVersion $version
          } else {
            Write-Host "Skipping .NET 9 ARM64 update - No version detected"
          }

      # Update .NET 10 AMD64 Dockerfile
      - name: Update .NET 10 AMD64
        id: update-net10-amd64
        shell: pwsh
        env:
          DOCKERFILE_PATH: ${{ env.NET_10_AMD64_Dockerfile }}
        run: |
          $version = & "./LambdaRuntimeDockerfiles/get-latest-aspnet-versions.ps1" -MajorVersion "10"
          if (-not [string]::IsNullOrEmpty($version)) {
            & "./LambdaRuntimeDockerfiles/update-dockerfile.ps1" -DockerfilePath "${{ env.DOCKERFILE_PATH }}" -NextVersion $version
          } else {
            Write-Host "Skipping .NET 10 AMD64 update - No version detected"
          }

      # Update .NET 10 ARM64 Dockerfile
      - name: Update .NET 10 ARM64
        id: update-net10-arm64
        shell: pwsh
        env:
          DOCKERFILE_PATH: ${{ env.NET_10_ARM64_Dockerfile }}
        run: |
          $version = & "./LambdaRuntimeDockerfiles/get-latest-aspnet-versions.ps1" -MajorVersion "10"
          if (-not [string]::IsNullOrEmpty($version)) {
            & "./LambdaRuntimeDockerfiles/update-dockerfile.ps1" -DockerfilePath "${{ env.DOCKERFILE_PATH }}" -NextVersion $version
          } else {
            Write-Host "Skipping .NET 10 ARM64 update - No version detected"
          }

      # Update .NET 11 AMD64 Dockerfile
      - name: Update .NET 11 AMD64
        id: update-net11-amd64
        shell: pwsh
        env:
          DOCKERFILE_PATH: ${{ env.NET_11_AMD64_Dockerfile }}
        run: |
          $version = & "./LambdaRuntimeDockerfiles/get-latest-aspnet-versions.ps1" -MajorVersion "11"
          if (-not [string]::IsNullOrEmpty($version)) {
            & "./LambdaRuntimeDockerfiles/update-dockerfile.ps1" -DockerfilePath "${{ env.DOCKERFILE_PATH }}" -NextVersion $version
          } else {
            Write-Host "Skipping .NET 11 AMD64 update - No version detected"
          }

      # Update .NET 11 ARM64 Dockerfile
      - name: Update .NET 11 ARM64
        id: update-net11-arm64
        shell: pwsh
        env:
          DOCKERFILE_PATH: ${{ env.NET_11_ARM64_Dockerfile }}
        run: |
          $version = & "./LambdaRuntimeDockerfiles/get-latest-aspnet-versions.ps1" -MajorVersion "11"
          if (-not [string]::IsNullOrEmpty($version)) {
            & "./LambdaRuntimeDockerfiles/update-dockerfile.ps1" -DockerfilePath "${{ env.DOCKERFILE_PATH }}" -NextVersion $version
          } else {
            Write-Host "Skipping .NET 11 ARM64 update - No version detected"
          }

      # Commit changes and create a branch
      - name: Commit and Push
        id: commit-push
        shell: pwsh
        run: |
          git config --global user.email "github-aws-sdk-dotnet-automation@amazon.com"
          git config --global user.name "aws-sdk-dotnet-automation"

          $remoteBranch = "chore/auto-update-Dockerfiles-daily"

          # Try to fetch the remote branch (it may not exist yet)
          git fetch origin $remoteBranch 2>$null
          $remoteExists = ($LASTEXITCODE -eq 0)

          # Check if there are any changes to commit
          if (git status --porcelain) {

            # Generate timestamp for unique local branch name
            $timestamp = Get-Date -Format "yyyyMMddHHmmss"
            $localBranch = "chore/auto-update-Dockerfiles-daily-$timestamp"

            # Always create a new unique local branch
            git checkout -b $localBranch

            git add "**/*Dockerfile"
            git commit -m "chore: Daily ASP.NET Core version update in Dockerfiles"

            # If remote branch exists and there is no diff vs remote branch, skip pushing and PR creation
            if ($remoteExists) {
              git diff --quiet "origin/$remoteBranch...HEAD"
              if ($LASTEXITCODE -eq 0) {
                echo "No diff vs origin/$remoteBranch. Skipping push/PR creation."
                Add-Content -Path $env:GITHUB_OUTPUT -Value "CHANGES_MADE=false"
                exit 0
              }
            }

            # Only now delete + push (because we know it's different)
            git push origin --delete $remoteBranch 2>$null
            git push --force origin "${localBranch}:${remoteBranch}"

            # Write the remote branch name to GITHUB_OUTPUT for use in the PR step
            Add-Content -Path $env:GITHUB_OUTPUT -Value "BRANCH=$remoteBranch"
            Add-Content -Path $env:GITHUB_OUTPUT -Value "CHANGES_MADE=true"
            echo "Changes committed to local branch $localBranch and pushed to remote branch $remoteBranch"
          } else {
            echo "No changes detected in Dockerfiles, skipping PR creation"
            Add-Content -Path $env:GITHUB_OUTPUT -Value "CHANGES_MADE=false"
          }

      # Create a Pull Request
      - name: Create Pull Request
        id: pull-request
        if: ${{ steps.commit-push.outputs.CHANGES_MADE == 'true' }}
        uses: repo-sync/pull-request@v2
        with:
          source_branch: ${{ steps.commit-push.outputs.BRANCH }}
          destination_branch: "dev"
          pr_title: 'chore: Daily ASP.NET Core version update in Dockerfiles'
          pr_body: "This PR automatically updates the Dockerfiles to use the latest ASP.NET Core version.

            Verify that the Dockerfiles have correct versions and matching SHA512 checksums for ASP.NET Core runtime.

            All .NET versions: https://dotnet.microsoft.com/en-us/download/dotnet

            *Description of changes:*
            \n${{ format
            (
            '{0}\n{1}\n{2}\n{3}\n{4}\n{5}\n{6}\n{7}',
            join(steps.update-net8-amd64.outputs.MESSAGE, '\n'),
            join(steps.update-net8-arm64.outputs.MESSAGE, '\n'),
            join(steps.update-net9-amd64.outputs.MESSAGE, '\n'),
            join(steps.update-net9-arm64.outputs.MESSAGE, '\n'),
            join(steps.update-net10-amd64.outputs.MESSAGE, '\n'),
            join(steps.update-net10-arm64.outputs.MESSAGE, '\n'),
            join(steps.update-net11-amd64.outputs.MESSAGE, '\n'),
            join(steps.update-net11-arm64.outputs.MESSAGE, '\n')
            )
            }}"
          github_token: ${{ secrets.GITHUB_TOKEN }}

      # Add "Release Not Needed" label to the PR
      - name: Add Release Not Needed label
        if: ${{ steps.pull-request.outputs.pr_number }}
        uses: actions/github-script@v8
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
          script: |
            github.rest.issues.addLabels({
              owner: context.repo.owner,
              repo: context.repo.repo,
              issue_number: ${{ steps.pull-request.outputs.pr_number }},
              labels: ['Release Not Needed']
            })