ci: add scheduled workflow to regenerate extensions.json#113
Closed
niels9001 wants to merge 5 commits into
Closed
Conversation
Runs daily (and on demand) to regenerate extensions.json from the extension manifests and opens a PR when the gallery content changes. Skips when only the generatedAt timestamp would change. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
The org disables 'Allow GitHub Actions to create and approve pull requests', so GITHUB_TOKEN cannot open PRs. Authenticate via a GitHub App installation token instead. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
The org ruleset requires an approving review (with require_last_push_approval), so a second bot identity approves the app-authored PR before auto-merge completes it. This makes the scheduled regeneration fully automated while contributor PRs still require human moderator review. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
This was referenced Jul 12, 2026
Closed
Closed
Closed
Contributor
Author
|
Closing in favor of a Copilot app scheduled workflow that runs the regeneration on a devbox as a maintainer account. That approach avoids the GitHub App / token restrictions this Actions workflow needed. CODEOWNERS (#114) handles reviewer assignment. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds a scheduled workflow (
.github/workflows/regenerate-gallery.yml) that keepsextensions.jsonin sync with the extension manifests.Behavior
workflow_dispatch.extensions.jsonvia.github/scripts/generate.py.generatedAtchanges every run, ajqstep strips that field and compares old vs new. The run only proceeds when actual gallery content changed.extensions/**are unaffected and still require human moderator review.Required setup (see PR discussion)
vars.GALLERY_BOT_APP_ID+secrets.GALLERY_BOT_PRIVATE_KEY— GitHub App that opens the PR (Contents R/W, Pull requests R/W).secrets.GALLERY_APPROVE_TOKEN— a different identity (second App or bot PAT) that approves the PR. Must differ from the App because the org ruleset enforcesrequire_last_push_approval.Notes
GITHUB_TOKENcan't open PRs — hence the App token, matching the convention used across microsoft-org repos (aspire, fluentui, Docker-Provider, etc.).extensions.json.