maintenance-queue.yml

name: Maintenance semantic queue

on:
  schedule:
    - cron: "17 1 * * *"
  workflow_dispatch:
  push:
    branches: [main]
    paths:
      - "go.mod"

permissions:
  contents: read
  issues: write

jobs:
  go-release-review:
    if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
    runs-on: ubuntu-24.04
    timeout-minutes: 5
    steps:
      - uses: actions/checkout@v7.0.1

      - name: Queue semantic review for the adopted Go release
        env:
          GH_TOKEN: ${{ github.token }}
          REPO: ${{ github.repository }}
        shell: bash
        run: |
          set -euo pipefail
          VERSION="$(awk '$1 == "go" { print $2; exit }' go.mod)"
          test -n "$VERSION"

          gh label create "automation:go-release" --repo "$REPO" --color "8250df" --description "Semantic review after adopting a new stable Go release" --force

          marker="go-release-review-${VERSION}"
          existing="$(gh issue list --repo "$REPO" --state all --limit 200 --search "${marker} in:body" --json number --jq '.[0].number // empty')"
          if [[ -n "$existing" ]]; then
            echo "Go ${VERSION} review already exists as issue #${existing}"
            exit 0
          fi

          cat > /tmp/go-review.md <<EOF
          <!-- ${marker} -->
          <!-- automation-queue:go-release -->

          Go **${VERSION}** is now the repository's adopted toolchain version.

          The version bump itself is already handled by Renovate. This task is the semantic follow-up: read the Go ${VERSION} release notes and review the codebase, CI, release tooling, docs, vet/lint configuration, and platform-specific workarounds for newly preferable APIs, newly stable features, obsolete compatibility code, or other worthwhile cleanup. Run the full CI/release matrix after any changes.

          If the release offers nothing useful beyond the version update already merged, document that review and close this as a no-op.
          EOF

          gh issue create --repo "$REPO" --title "Go ${VERSION}: post-upgrade best-practices review" --label "automation:go-release" --body-file /tmp/go-review.md

  wintun-watch:
    if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch'
    runs-on: ubuntu-24.04
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@v7.0.1

      - name: Prepare Wintun maintenance labels
        env:
          GH_TOKEN: ${{ github.token }}
          REPO: ${{ github.repository }}
        run: |
          gh label create "automation:quarantine" --repo "$REPO" --color "6e7781" --description "Candidate observed but not yet old enough to act on" --force
          gh label create "automation:dependency" --repo "$REPO" --color "1d76db" --description "Dependency update queued automatically" --force

      - name: Check Wintun
        env:
          GH_TOKEN: ${{ github.token }}
        run: python3 .github/scripts/wintun_update_watch.py