Add workflow to auto-create PR on upstream Misskey release (#3)

* Initial plan

* Add workflow to auto-create PR on upstream Misskey release

Co-authored-by: techfish-11 <135989741+techfish-11@users.noreply.github.com>
Agent-Logs-Url: https://github.com/evex-dev/eveskey/sessions/68630c3d-b655-4a3d-9473-8b32fa6e642a

* Update .github/workflows/upstream-release-sync.yml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update .github/workflows/upstream-release-sync.yml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* ci: upstream-release-sync: Avoid duplicate execution

* ci: upstream-release-sync: remove unneeded GITHUB_TOKEN

* ci: upstream-release-sync: Check less frequently

* ci: upstream-release-sync: better check

* ci: upstream-release-sync: better logic and fmt

* ci: upstream-release-sync: remove unneeded if

GitHub CLI returns `1` if the release is not found

* ci: upstream-release-sync: fix to use x-access-token

* ci: upstream-release-sync: fix check name

* ci: upstream-release-sync: add more GH_TOKEN to (maybe) increase rate-limit

* ci: upstream-release-sync: remove newline

* ci: upstream-release-sync: allow to update workflows

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: techfish-11 <135989741+techfish-11@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Akari Tsuyukusa <akkun11.open@gmail.com>

Author: 4 people

.github/workflows/upstream-release-sync.yml

@@ -0,0 +1,80 @@
+name: Sync upstream release
+
+on:
+  schedule:
+    - cron: '39 6 * * Tue'
+  workflow_dispatch:
+
+concurrency:
+  group: upstream-release-sync
+
+jobs:
+  sync:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/create-github-app-token@v3
+        id: app-token
+        with:
+          app-id: ${{ secrets.SYNC_AGENT_APP_ID }}
+          private-key: ${{ secrets.SYNC_AGENT_PRIVATE_KEY }}
+
+      - name: Get latest upstream release
+        id: upstream
+        run: |
+          tag=$(gh release view --repo misskey-dev/misskey --json tagName --jq '.tagName')
+          echo "tag=$tag" >> "$GITHUB_OUTPUT"
+        env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+
+      - name: Check if PR already exists
+        id: check
+        run: |
+          if gh pr list --repo ${{ github.repository }} --json isCrossRepository --state all --base develop --head upstream/${{ steps.upstream.outputs.tag }} | \
+              jq -e '.[] | select(.isCrossRepository == false)' > /dev/null 2>&1
+          then
+            echo "exists=true" >> $GITHUB_OUTPUT
+          else
+            echo "exists=false" >> $GITHUB_OUTPUT
+          fi
+        env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+
+      - name: Get GitHub App User ID
+        id: get-user-id
+        run: echo "user-id=$(gh api "/users/${{ steps.app-token.outputs.app-slug }}[bot]" --jq .id)" >> "$GITHUB_OUTPUT"
+        env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+
+      - name: Setup git repository
+        if: steps.check.outputs.exists == 'false'
+        run: |
+          git init --bare
+          git config user.name "github-actions[bot]"
+          git config --global user.name '${{ steps.app-token.outputs.app-slug }}[bot]'
+          git config --global user.email '${{ steps.get-user-id.outputs.user-id }}+${{ steps.app-token.outputs.app-slug }}[bot]@users.noreply.github.com'          git fetch --filter=blob:none origin develop
+
+      - name: Add upstream remote and fetch tag
+        if: steps.check.outputs.exists == 'false'
+        run: |
+          git remote add upstream https://github.com/misskey-dev/misskey.git
+          git fetch upstream tag "${{ steps.upstream.outputs.tag }}" --no-tags
+
+      - name: Create and push branch
+        if: steps.check.outputs.exists == 'false'
+        run: git push origin "refs/tags/${{ steps.upstream.outputs.tag }}:refs/heads/upstream/${{ steps.upstream.outputs.tag }}"
+
+      - name: Create PR
+        if: steps.check.outputs.exists == 'false'
+        run: |
+          body=$(gh release view "${{ steps.upstream.outputs.tag }}" --repo misskey-dev/misskey --json body --jq '.body')
+          if [[ -z "$body" ]]; then
+            body="Sync upstream release: ${{ steps.upstream.outputs.tag }}"
+          fi
+          echo "$body" > /tmp/pr-body.txt
+          gh pr create \
+            --title "upstream: ${{ steps.upstream.outputs.tag }}" \
+            --body-file /tmp/pr-body.txt \
+            --head "upstream/${{ steps.upstream.outputs.tag }}" \
+            --base develop
+        env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}