Automatically checksum renovated packages

.github/workflows/build.yaml

@@ -1,17 +1,59 @@
 name: build
 
 on:
-  # TODO: Enable once we have conditional build logic built
+  pull_request:
-  # pull_request:
+    paths:
-  #   paths:
+      - "srcpkgs/**"
-  #     - 'srcpkgs/**'
+    types:
+      - opened
+      - reopened
+      - synchronize
+    branches:
+      - main
   push:
     paths:
-      - 'srcpkgs/**'
+      - "srcpkgs/**"
+    branches:
+      - main
 
 jobs:
+  checksum:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          ref: ${{ github.ref }}
+
+      - name: get changed package
+        run: |
+          echo "CHANGED_PKG=$(git diff --name-only origin/main ${GITHUB_HEAD_REF} "srcpkgs/*/template" | head -1 | cut -d/ -f2)" >> $GITHUB_ENV
+
+      - name: checkout upstream templates
+        if: ${{ env.CHANGED_PKG != '' }}
+        uses: actions/checkout@v4
+        with:
+          repository: void-linux/void-packages
+          ref: master
+          fetch-depth: 1
+          path: distdir
+
+      - name: generate checksum
+        if: ${{ env.CHANGED_PKG != '' }}
+        run: |
+          XBPS_DISTDIR="$PWD/distdir" xgensum -i ${{ env.CHANGED_PKG }}
+
+      - name: Commit
+        if: ${{ env.CHANGED_PKG != '' }}
+        uses: stefanzweifel/git-auto-commit-action@v6
+        with:
+          file_pattern: "*/template"
+          commit_message: "Update checksum"
+
   changedpkgs:
     name: Check package changes
+    needs: [checksum]
     runs-on: ubuntu-latest
     if: "!contains(github.event.pull_request.title, '[ci skip]') && !contains(github.event.pull_request.body, '[ci skip]')"
 
@@ -43,7 +85,13 @@ jobs:
       fail-fast: false
       matrix:
         config:
-          - { arch: x86_64,       host: x86_64,      libc: glibc, platform: linux/amd64, test: 1 }
+          - {
+              arch: x86_64,
+              host: x86_64,
+              libc: glibc,
+              platform: linux/amd64,
+              test: 1,
+            }
           # - { arch: i686,         host: i686,        libc: glibc, platform: linux/386,   test: 1 }
           # - { arch: aarch64,      host: x86_64,      libc: glibc, platform: linux/amd64, test: 0 }
           # - { arch: armv7l,       host: x86_64,      libc: glibc, platform: linux/amd64, test: 0 }
@@ -57,9 +105,9 @@ jobs:
       volumes:
         - /dev:/dev
       env:
-        ARCH: '${{ matrix.config.arch }}'
+        ARCH: "${{ matrix.config.arch }}"
-        BOOTSTRAP: '${{ matrix.config.host }}'
+        BOOTSTRAP: "${{ matrix.config.host }}"
-        TEST: '${{ matrix.config.test }}'
+        TEST: "${{ matrix.config.test }}"
 
     steps:
       - name: Prepare container

.github/workflows/renovate.yaml

@@ -1,15 +1,15 @@
 name: renovate
 on:
   schedule:
-    - cron: '0 * * * *'
+    - cron: "0 * * * *"
   push:
     paths:
-      - '.github/**' # TODO: remove after debugging
+      - ".github/**" # TODO: remove after debugging
 
 env:
-  LOG_LEVEL: 'debug'
+  LOG_LEVEL: "info"
   RENOVATE_AUTODISCOVER: true
-  RENOVATE_AUTODISCOVER_FILTER: '${{ github.repository }}'
+  RENOVATE_AUTODISCOVER_FILTER: "${{ github.repository }}"
   RENOVATE_PLATFORM: github
   # RENOVATE_PLATFORM_COMMIT: true
   # RENOVATE_BOT_NAME: 'breq'
@@ -26,10 +26,3 @@ jobs:
         with:
           configurationFile: .github/renovate.json
           token: ${{ secrets.RENOVATE_TOKEN }}
-
-
-      - name: Find updated package
-        run: |
-          #!/usr/bin/env bash
-          set -euxo pipefail
-          echo "pkgbuild=$(git diff --name-only origin/main origin/${GITHUB_HEAD_REF} "*template" | head -1 | xargs dirname)" >> $GITHUB_ENV