bump-libs.yaml

---
name: Bump Libs

on:
  workflow_dispatch:
  schedule:
    - cron: '30 6 * * 1' # on each monday 6:30

# Checks if any concurrent jobs is running for kernels CI and eventually cancel it.
concurrency:
  group: bump-libs-ci
  cancel-in-progress: true

jobs:
  bump-libs:
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write
    steps:
      - name: Download libs master tar.gz
        run: |
          wget https://github.com/falcosecurity/libs/archive/refs/heads/master.tar.gz

      - name: Store libs hash and shasum
        id: store
        run: |
          gunzip -c master.tar.gz > master.tar
          commit=$(cat master.tar | git get-tar-commit-id)
          echo "COMMIT=$commit" >> "$GITHUB_OUTPUT"
          wget https://github.com/falcosecurity/libs/archive/$commit.tar.gz
          echo "SHASUM=$(sha256sum $commit.tar.gz | awk '{print $1}')" >> "$GITHUB_OUTPUT"

      - name: Checkout
        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
        with:
          path: falco

      - name: Bump libs version and hash
        run: |
          cd falco
          sed -i -E '45s/FALCOSECURITY_LIBS_VERSION "(.+)"/FALCOSECURITY_LIBS_VERSION "${{ steps.store.outputs.COMMIT }}"/' cmake/modules/falcosecurity-libs.cmake
          sed -i -E '47s/"SHA256=(.+)"/"SHA256=${{ steps.store.outputs.SHASUM }}"/' cmake/modules/falcosecurity-libs.cmake
          sed -i -E '38s/DRIVER_VERSION "(.+)"/DRIVER_VERSION "${{ steps.store.outputs.COMMIT }}"/' cmake/modules/driver.cmake
          sed -i -E '40s/"SHA256=(.+)"/"SHA256=${{ steps.store.outputs.SHASUM }}"/' cmake/modules/driver.cmake

      - name: Create Pull Request
        uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f # v7.0.5
        with:
          path: falco
          signoff: true
          base: master
          branch: update/libs
          title: 'update(cmake): update libs and driver to latest master'
          body: |
            This PR updates libs and driver to latest commit.
            /kind release
            /area build
            ```release-note
            NONE
            ```
          commit-message: 'update(cmake): update libs and driver to latest master.'
          token: ${{ secrets.GITHUB_TOKEN }}