[bot:openshift-pipelines-index-4.19:release-v1.21.x] update konflux configuration

.github/renovate.json

@@ -0,0 +1,26 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "github>konflux-ci/mintmaker//config/renovate/renovate.json"
+  ],
+  "branchPrefix": "osp-mintmaker/",
+  "enabledManagers": [
+    "tekton",
+    "dockerfile",
+    "rpm-lockfile"
+  ],
+  "addLabels": [
+    "approved",
+    "lgtm",
+    "konflux",
+    "mintmaker"
+  ],
+  "autoApprove": true,
+  "packageRules": [
+    {
+      "matchPackageNames": ["*"],
+      "automerge": true,
+      "ignorePaths": ["upstream/**"]
+    }
+  ]
+}

.github/workflows/all-generate-index-catalog.yaml

@@ -0,0 +1,64 @@
+name: all-generate-index-catalog
+
+on:
+  push:
+    branches:
+      - main
+      - next
+      - release-v*
+    paths:
+      - nightly-bundle.yaml
+      - .github/workflows/all-generate-index-catalog.yaml
+      - .github/workflows/index-render-template.yaml
+  workflow_dispatch:
+    inputs:
+      environment:
+        description: 'Select Environment'
+        required: true
+        default: 'devel'
+        type: choice
+        options:
+          - devel
+  schedule:
+    - cron: "0 1 * * *" # At 1AM everyday
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  collect-branches:
+    runs-on: ubuntu-latest
+    outputs:
+      matrix: ${{ steps.set-matrix.outputs.matrix }}
+    steps:
+      - name: Get branches matching pattern
+        id: set-matrix
+        run: |
+          # List all branches and filter
+          branches=$(gh api repos/${{ github.repository }}/branches --paginate -q '.[] | .name' | grep -E '^(release-v.*\.x$|next$|main$)')
+
+          echo "Found branches:"
+          echo "$branches"
+
+          # Convert to JSON array for matrix
+          json=$(jq -nc --argjson arr "$(printf '%s\n' "$branches" | jq -R . | jq -s .)" '{branch: $arr}')
+          echo "Matrix JSON: $json"
+
+          echo "matrix=$json" >> $GITHUB_OUTPUT
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+  build:
+    needs: collect-branches
+    runs-on: ubuntu-latest
+    strategy:
+      matrix: ${{ fromJSON(needs.collect-branches.outputs.matrix) }}
+    steps:
+      - name: Trigger index-render-template workflow for ${{ matrix.branch }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          echo "Triggering workflow for branch: ${{ matrix.branch }}"
+
+          gh workflow run "index-render-template.yaml" \
+            --ref "${{ matrix.branch }}" \
+            --repo "${{ github.repository }}"

.github/workflows/auto-approve-konflux-nudges.yaml

@@ -3,7 +3,7 @@ name: auto-approve-konflux-nudges
 on:
   workflow_dispatch: {}
   schedule:
-  - cron: "*/30 * * * *" # At every 30 minutes
+    - cron: "0,30 * * * *" # At every 30 minutes
 
 jobs:
   auto-approve:
@@ -14,18 +14,15 @@ jobs:
     steps:
     - name: Checkout the current repo
       uses: actions/checkout@v4
-    - name: auto-approve
+    - name: auto-merge-update-references
       run: |
         gh auth status
         git config user.name openshift-pipelines-bot
         git config user.email [email protected]
         # Approve and merge pull-request with no reviews
-        for p in $(gh pr list --search "author:app/red-hat-konflux chore(deps) .*"  --json "title,labels,number" | jq ".[] | select((.labels | length) == 0) | .number"); do
-          gh pr review $p --approve --body "/lgtm"
-        done
-        # LGTM pull requests that might have one review but no more lgtm
-        for p in $(gh pr list --search "author:app/red-hat-konflux chore(deps) .*"  --json "title,labels,number" | jq ".[] | select((.labels | length) == 1) | .number"); do
-          gh pr review $p --approve --body "/lgtm"
+        for p in $(gh pr list --search "label:konflux-nudge" --json "number" | jq ".[].number"); do
+          gh pr review --approve --body "/lgtm" $p 
+          gh pr merge --rebase --delete-branch --auto $p
         done
       env:
-        GH_TOKEN: ${{ secrets.OPENSHIFT_PIPELINES_ROBOT }}
+        GH_TOKEN: ${{ secrets.OPENSHIFT_PIPELINES_ROBOT }}

.github/workflows/auto-merge-next.yaml

@@ -0,0 +1,44 @@
+name: auto-merge-next
+
+on:
+  workflow_dispatch: {}
+  schedule:
+    - cron: "0,30 * * * *" # At every 30 minutes
+
+jobs:
+  auto-approve:
+    runs-on: ubuntu-latest
+    if: github.repository_owner == 'openshift-pipelines' # do not run this elsewhere
+    permissions:
+      pull-requests: write
+    steps:
+      - name: Checkout the current repo
+        uses: actions/checkout@v4
+      - name: auto-approve-konflux-nudges
+        run: |
+          gh auth status
+          git config user.name openshift-pipelines-bot
+          git config user.email [email protected]
+          # Approve and merge pull-request with no reviews
+          BASE_BRANCH=next
+          echo "Base branch is $BASE_BRANCH"
+          # LGTM pull requests that might have one review but no more lgtm
+          for p in $(gh pr list --search "label:konflux-nudge base:$BASE_BRANCH" --json "number" | jq ".[].number"); do
+            echo "Approving PR $p"
+            gh pr review $p --approve --body "/lgtm"
+            gh pr merge --rebase --delete-branch --auto $p
+          done
+        env:
+          GH_TOKEN: ${{ secrets.OPENSHIFT_PIPELINES_ROBOT }}
+      - name: auto-approve-upstream
+        run: |
+          gh auth status
+          git config user.name openshift-pipelines-bot
+          git config user.email [email protected]
+          # Approve and merge pull-request with no reviews
+          BASE_BRANCH=next
+          for p in $(gh pr list --search "head:actions/update/sources-$BASE_BRANCH" --json "number" | jq ".[].number"); do
+            gh pr review $p --approve --body "/lgtm"
+          done
+        env:
+          GH_TOKEN: ${{ secrets.OPENSHIFT_PIPELINES_ROBOT }}

.github/workflows/auto-merge-release-v1.15.x.yaml

@@ -0,0 +1,43 @@
+name: auto-merge-release-v1.15.x
+
+on:
+  workflow_dispatch: {}
+  schedule:
+    - cron: "10,40 * * * *" # At every 30 minutes
+
+jobs:
+  auto-approve:
+    runs-on: ubuntu-latest
+    if: github.repository_owner == 'openshift-pipelines' # do not run this elsewhere
+    permissions:
+      pull-requests: write
+    steps:
+      - name: Checkout the current repo
+        uses: actions/checkout@v4
+      - name: auto-approve-update-references
+        run: |
+          gh auth status
+          git config user.name openshift-pipelines-bot
+          git config user.email [email protected]
+          # Approve and merge pull-request with no reviews
+          BASE_BRANCH=release-v1.15.x
+          echo "Base branch is $BASE_BRANCH"
+          # LGTM pull requests that might have one review but no more lgtm
+          for p in $(gh pr list --search "author:app/red-hat-konflux base:$BASE_BRANCH" --json "number" | jq ".[].number"); do
+            echo "Approving PR $p"
+            gh pr review $p --approve --body "/lgtm"
+          done
+        env:
+          GH_TOKEN: ${{ secrets.OPENSHIFT_PIPELINES_ROBOT }}
+      - name: auto-approve-upstream
+        run: |
+          gh auth status
+          git config user.name openshift-pipelines-bot
+          git config user.email [email protected]
+          # Approve and merge pull-request with no reviews
+          BASE_BRANCH=release-v1.15.x
+          for p in $(gh pr list --search "head:actions/update/sources-$BASE_BRANCH" --json "number" | jq ".[].number"); do
+            gh pr review $p --approve --body "/lgtm"
+          done
+        env:
+          GH_TOKEN: ${{ secrets.OPENSHIFT_PIPELINES_ROBOT }}

.github/workflows/auto-merge-release-v1.17.x.yaml

@@ -0,0 +1,40 @@
+# Generated for Release 1.17 by openshift-pipelines/hack. DO NOT EDIT.
+name: auto-merge-release-v1.17.x
+
+on:
+  workflow_dispatch: {}
+  schedule:
+  - cron: "*/30 * * * *" # At every 30 minutes
+
+jobs:
+  auto-approve:
+    runs-on: ubuntu-latest
+    if: github.repository_owner == 'openshift-pipelines' # do not run this elsewhere
+    permissions:
+      pull-requests: write
+    steps:
+    - name: Checkout the current repo
+      uses: actions/checkout@v4
+    - name: auto-merge-update-references
+      run: |
+        gh auth status
+        git config user.name openshift-pipelines-bot
+        git config user.email [email protected]
+        # Approve and merge pull-request with no reviews
+        for p in $(gh pr list --search "author:app/red-hat-konflux head:konflux/references/release-v1.17.x" --json "number" | jq ".[].number"); do
+          gh pr merge --rebase --delete-branch --auto $p
+        done
+      env:
+        GH_TOKEN: ${{ secrets.OPENSHIFT_PIPELINES_ROBOT }}
+    - name: auto-merge-upstream-release-v1.17.x
+      run: |
+        gh auth status
+        git config user.name openshift-pipelines-bot
+        git config user.email [email protected]
+        # Approve and merge pull-request with no reviews
+        for p in $(gh pr list --search "head:actions/update/sources-release-v1.17.x" --json "number" | jq ".[].number"); do
+          gh pr merge --rebase --delete-branch --auto $p
+        done
+      env:
+        GH_TOKEN: ${{ secrets.OPENSHIFT_PIPELINES_ROBOT }}
+

.github/workflows/auto-merge-upstream-next.yaml

@@ -0,0 +1,29 @@
+# Generated for Konflux Application openshift-pipelines-operator-next by openshift-pipelines/hack. DO NOT EDIT
+name: auto-merge-upstream-next
+
+on:
+  workflow_dispatch: {}
+  schedule:
+  - cron: "*/30 * * * *" # At every 30 minutes
+
+jobs:
+  auto-approve:
+    runs-on: ubuntu-latest
+    if: github.repository_owner == 'openshift-pipelines' # do not run this elsewhere
+    permissions:
+      pull-requests: write
+    steps:
+    - name: Checkout the current repo
+      uses: actions/checkout@v4
+    - name: auto-merge-upstream-next
+      run: |
+        gh auth status
+        git config user.name openshift-pipelines-bot
+        git config user.email [email protected]
+        # Approve and merge pull-request with no reviews
+        for p in $(gh pr list --search "head:actions/update/sources-next" --json "number" | jq ".[].number"); do
+          gh pr merge --rebase --delete-branch --auto $p
+        done
+      env:
+        GH_TOKEN: ${{ secrets.OPENSHIFT_PIPELINES_ROBOT }}
+

.github/workflows/auto-merge-upstream-release-v1.16.x.yaml

@@ -0,0 +1,29 @@
+# Generated for Konflux Application openshift-pipelines-operator-1.16 by openshift-pipelines/hack. DO NOT EDIT
+name: auto-merge-upstream-release-v1.16.x
+
+on:
+  workflow_dispatch: {}
+  schedule:
+  - cron: "*/30 * * * *" # At every 30 minutes
+
+jobs:
+  auto-approve:
+    runs-on: ubuntu-latest
+    if: github.repository_owner == 'openshift-pipelines' # do not run this elsewhere
+    permissions:
+      pull-requests: write
+    steps:
+    - name: Checkout the current repo
+      uses: actions/checkout@v4
+    - name: auto-merge-upstream-release-v1.16.x
+      run: |
+        gh auth status
+        git config user.name openshift-pipelines-bot
+        git config user.email [email protected]
+        # Approve and merge pull-request with no reviews
+        for p in $(gh pr list --search "head:actions/update/sources-release-v1.16.x" --json "number" | jq ".[].number"); do
+          gh pr merge --rebase --delete-branch --auto $p
+        done
+      env:
+        GH_TOKEN: ${{ secrets.OPENSHIFT_PIPELINES_ROBOT }}
+

.github/workflows/auto-merge-upstream-release-v1.17.x.yaml

@@ -0,0 +1,29 @@
+# Generated for Konflux Application openshift-pipelines-operator-1.17 by openshift-pipelines/hack. DO NOT EDIT
+name: auto-merge-upstream-release-v1.17.x
+
+on:
+  workflow_dispatch: {}
+  schedule:
+  - cron: "*/30 * * * *" # At every 30 minutes
+
+jobs:
+  auto-approve:
+    runs-on: ubuntu-latest
+    if: github.repository_owner == 'openshift-pipelines' # do not run this elsewhere
+    permissions:
+      pull-requests: write
+    steps:
+    - name: Checkout the current repo
+      uses: actions/checkout@v4
+    - name: auto-merge-upstream-release-v1.17.x
+      run: |
+        gh auth status
+        git config user.name openshift-pipelines-bot
+        git config user.email [email protected]
+        # Approve and merge pull-request with no reviews
+        for p in $(gh pr list --search "head:actions/update/sources-release-v1.17.x" --json "number" | jq ".[].number"); do
+          gh pr merge --rebase --delete-branch --auto $p
+        done
+      env:
+        GH_TOKEN: ${{ secrets.OPENSHIFT_PIPELINES_ROBOT }}
+

.github/workflows/auto-merge-upstream-release-v1.19.x.yaml

@@ -0,0 +1,29 @@
+# Generated for Konflux Application openshift-pipelines-operator by openshift-pipelines/hack. DO NOT EDIT
+name: auto-merge-upstream-release-v1.19.x
+
+on:
+  workflow_dispatch: {}
+  schedule:
+  - cron: "*/30 * * * *" # At every 30 minutes
+
+jobs:
+  auto-approve:
+    runs-on: ubuntu-latest
+    if: github.repository_owner == 'openshift-pipelines' # do not run this elsewhere
+    permissions:
+      pull-requests: write
+    steps:
+    - name: Checkout the current repo
+      uses: actions/checkout@v4
+    - name: auto-merge-upstream-release-v1.19.x
+      run: |
+        gh auth status
+        git config user.name openshift-pipelines-bot
+        git config user.email [email protected]
+        # Approve and merge pull-request with no reviews
+        for p in $(gh pr list --search "head:actions/update/sources-release-v1.19.x" --json "number" | jq ".[].number"); do
+          gh pr merge --rebase --delete-branch --auto $p
+        done
+      env:
+        GH_TOKEN: ${{ secrets.OPENSHIFT_PIPELINES_ROBOT }}
+