dependency-updates.yml

name: dependency-updates
on:
  push:
    branches:
      - latest
  schedule:
    - cron: "0 */6 * * *"
  workflow_dispatch:
jobs:
  nginx-update:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: update nginx version
        id: update
        run: |
          NGINX_VER="$(
          git ls-remote --tags https://github.com/freenginx/nginx \
              | cut -d/ -f3 \
              | sort -V \
              | grep -v rc \
              | tail -1
          )"
          sed -i "s|ARG NGINX_VER=.*|ARG NGINX_VER=$NGINX_VER|" Dockerfile
          echo "version=$NGINX_VER" >> $GITHUB_OUTPUT
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v7
        with:
          signoff: true
          delete-branch: true
          commit-message: update nginx version to ${{ steps.update.outputs.version }}
          branch: update-nginx-version
          title: update nginx version to ${{ steps.update.outputs.version }}
          body: update nginx version to ${{ steps.update.outputs.version }}
  openssl-update:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: update openssl version
        id: update
        run: |
          OPENSSL_VER="$(
          git ls-remote --heads https://github.com/quictls/openssl openssl-*.*.*+quic \
              | cut -d/ -f3 \
              | sort -V \
              | grep -v rc \
              | tail -1
          )"
          sed -i "s|ARG OPENSSL_VER=.*|ARG OPENSSL_VER=$OPENSSL_VER|" Dockerfile
          echo "version=$OPENSSL_VER" >> $GITHUB_OUTPUT
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v7
        with:
          signoff: true
          delete-branch: true
          commit-message: update openssl version to ${{ steps.update.outputs.version }}
          branch: update-openssl-version
          title: update openssl version to ${{ steps.update.outputs.version }}
          body: update openssl version to ${{ steps.update.outputs.version }}
  modsecurity-update:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: update modsecurity version
        id: update
        run: |
          MODSEC_VER="$(
          git ls-remote --tags https://github.com/SpiderLabs/ModSecurity \
              | cut -d/ -f3 \
              | sort -V \
              | grep -v rc \
              | tail -1 \
              | sed "s|\^{}||g"
          )"
          sed -i "s|ARG MODSEC_VER=.*|ARG MODSEC_VER=$MODSEC_VER|" Dockerfile
          echo "version=$MODSEC_VER" >> $GITHUB_OUTPUT
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v7
        with:
          signoff: true
          delete-branch: true
          commit-message: update modsecurity version to ${{ steps.update.outputs.version }}
          branch: update-modsecurity-version
          title: update modsecurity version to ${{ steps.update.outputs.version }}
          body: update modsecurity version to ${{ steps.update.outputs.version }}
  dynamic_tls_records-update:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: update dynamic_tls_records version
        id: update
        run: |
          git clone https://github.com/nginx-modules/ngx_http_tls_dyn_size ngx_http_tls_dyn_size
          DTR_VER="$(
          ls ngx_http_tls_dyn_size/nginx__dynamic_tls_records_*.patch \
              | sed "s|ngx_http_tls_dyn_size/nginx__dynamic_tls_records_\([0-9.]\+\)+.patch|\1|g" \
              | sort -V \
              | grep -v rc \
              | tail -1
          )"
          rm -r ngx_http_tls_dyn_size
          sed -i "s|ARG DTR_VER=.*|ARG DTR_VER=$DTR_VER|" Dockerfile
          echo "version=$DTR_VER" >> $GITHUB_OUTPUT
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v7
        with:
          signoff: true
          delete-branch: true
          commit-message: update dynamic_tls_records version to ${{ steps.update.outputs.version }}
          branch: update-dynamic_tls_records-version
          title: update dynamic_tls_records version to ${{ steps.update.outputs.version }}
          body: update dynamic_tls_records version to ${{ steps.update.outputs.version }}
  resolver_conf_parsing-update:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: update resolver_conf_parsing version
        id: update
        run: |
          git clone https://github.com/openresty/openresty openresty
          RCP_VER="$(
          ls openresty/patches/nginx-*-resolver_conf_parsing.patch \
              | sed "s|openresty/patches/nginx-\([0-9.]\+\)-resolver_conf_parsing.patch|\1|g" \
              | sort -V \
              | grep -v rc \
              | tail -1
          )"
          rm -r openresty
          sed -i "s|ARG RCP_VER=.*|ARG RCP_VER=$RCP_VER|" Dockerfile
          echo "version=$RCP_VER" >> $GITHUB_OUTPUT
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v7
        with:
          signoff: true
          delete-branch: true
          commit-message: update resolver_conf_parsing version to ${{ steps.update.outputs.version }}
          branch: update-resolver_conf_parsing-version
          title: update resolver_conf_parsing version to ${{ steps.update.outputs.version }}
          body: update resolver_conf_parsing version to ${{ steps.update.outputs.version }}
  ngx_brotli-update:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: update ngx_brotli version
        id: update
        run: |
          NB_VER="$(
          git ls-remote --tags https://github.com/google/ngx_brotli \
              | cut -d/ -f3 \
              | sort -V \
              | grep -v rc \
              | tail -1
          )"
          sed -i "s|ARG NB_VER=.*|ARG NB_VER=$NB_VER|" Dockerfile
          echo "version=$NB_VER" >> $GITHUB_OUTPUT
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v7
        with:
          signoff: true
          delete-branch: true
          commit-message: update ngx_brotli version to ${{ steps.update.outputs.version }}
          branch: update-ngx_brotli-version
          title: update ngx_brotli version to ${{ steps.update.outputs.version }}
          body: update ngx_brotli version to ${{ steps.update.outputs.version }}
  ngx-fancyindex-update:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: update ngx-fancyindex version
        id: update
        run: |
          NF_VER="$(
          git ls-remote --tags https://github.com/aperezdc/ngx-fancyindex \
              | cut -d/ -f3 \
              | sort -V \
              | grep -v rc \
              | tail -1 \
              | sed "s|\^{}||g"
          )"
          sed -i "s|ARG NF_VER=.*|ARG NF_VER=$NF_VER|" Dockerfile
          echo "version=$NF_VER" >> $GITHUB_OUTPUT
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v7
        with:
          signoff: true
          delete-branch: true
          commit-message: update ngx-fancyindex version to ${{ steps.update.outputs.version }}
          branch: update-ngx-fancyindex-version
          title: update ngx-fancyindex version to ${{ steps.update.outputs.version }}
          body: update ngx-fancyindex version to ${{ steps.update.outputs.version }}
  headers-more-nginx-module-update:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: update headers-more-nginx-module version
        id: update
        run: |
          HMNM_VER="$(
          git ls-remote --tags https://github.com/openresty/headers-more-nginx-module \
              | cut -d/ -f3 \
              | sort -V \
              | grep -v rc \
              | tail -1
          )"
          sed -i "s|ARG HMNM_VER=.*|ARG HMNM_VER=$HMNM_VER|" Dockerfile
          echo "version=$HMNM_VER" >> $GITHUB_OUTPUT
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v7
        with:
          signoff: true
          delete-branch: true
          commit-message: update headers-more-nginx-module version to ${{ steps.update.outputs.version }}
          branch: update-headers-more-nginx-module-version
          title: update headers-more-nginx-module version to ${{ steps.update.outputs.version }}
          body: update headers-more-nginx-module version to ${{ steps.update.outputs.version }}
  njs-update:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: update njs version
        id: update
        run: |
          NJS_VER="$(
          git ls-remote --tags https://github.com/nginx/njs \
              | cut -d/ -f3 \
              | sort -V \
              | grep -v rc \
              | tail -1 \
              | sed "s|\^{}||g"
          )"
          sed -i "s|ARG NJS_VER=.*|ARG NJS_VER=$NJS_VER|" Dockerfile
          echo "version=$NJS_VER" >> $GITHUB_OUTPUT
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v7
        with:
          signoff: true
          delete-branch: true
          commit-message: update njs version to ${{ steps.update.outputs.version }}
          branch: update-njs-version
          title: update njs version to ${{ steps.update.outputs.version }}
          body: update njs version to ${{ steps.update.outputs.version }}
  ngx_devel_kit-update:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: update ngx_devel_kit version
        id: update
        run: |
          NDK_VER="$(
          git ls-remote --tags https://github.com/vision5/ngx_devel_kit \
              | cut -d/ -f3 \
              | sort -V \
              | grep -v rc \
              | tail -1 \
              | sed "s|\^{}||g"
          )"
          sed -i "s|ARG NDK_VER=.*|ARG NDK_VER=$NDK_VER|" Dockerfile
          echo "version=$NDK_VER" >> $GITHUB_OUTPUT
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v7
        with:
          signoff: true
          delete-branch: true
          commit-message: update ngx_devel_kit version to ${{ steps.update.outputs.version }}
          branch: update-ngx_devel_kit-version
          title: update ngx_devel_kit version to ${{ steps.update.outputs.version }}
          body: update ngx_devel_kit version to ${{ steps.update.outputs.version }}
  lua-nginx-module-update:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: update lua-nginx-module version
        id: update
        run: |
          LNM_VER="$(
          git ls-remote --tags https://github.com/openresty/lua-nginx-module \
              | cut -d/ -f3 \
              | sort -V \
              | grep -v rc \
              | tail -1
          )"
          sed -i "s|ARG LNM_VER=.*|ARG LNM_VER=$LNM_VER|" Dockerfile
          echo "version=$LNM_VER" >> $GITHUB_OUTPUT
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v7
        with:
          signoff: true
          delete-branch: true
          commit-message: update lua-nginx-module version to ${{ steps.update.outputs.version }}
          branch: update-lua-nginx-module-version
          title: update lua-nginx-module version to ${{ steps.update.outputs.version }}
          body: update lua-nginx-module version to ${{ steps.update.outputs.version }}
  modsecurity-nginx-update:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: update modsecurity-nginx version
        id: update
        run: |
          MODSECNGX_VER="$(
          git ls-remote --tags https://github.com/SpiderLabs/ModSecurity-nginx \
              | cut -d/ -f3 \
              | sort -V \
              | grep -v rc \
              | tail -1 \
              | sed "s|\^{}||g"
          )"
          sed -i "s|ARG MODSECNGX_VER=.*|ARG MODSECNGX_VER=$MODSECNGX_VER|" Dockerfile
          echo "version=$MODSECNGX_VER" >> $GITHUB_OUTPUT
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v7
        with:
          signoff: true
          delete-branch: true
          commit-message: update modsecurity-ngin version to ${{ steps.update.outputs.version }}
          branch: update-modsecurity-nginx-version
          title: update modsecurity-nginx version to ${{ steps.update.outputs.version }}
          body: update modsecurity-nginx version to ${{ steps.update.outputs.version }}
  lua-resty-core-update:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: update lua-resty-core version
        id: update
        run: |
          LRC_VER="$(
          git ls-remote --tags https://github.com/openresty/lua-resty-core \
              | cut -d/ -f3 \
              | sort -V \
              | grep -v rc \
              | tail -1
          )"
          sed -i "s|ARG LRC_VER=.*|ARG LRC_VER=$LRC_VER|" Dockerfile
          echo "version=$LRC_VER" >> $GITHUB_OUTPUT
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v7
        with:
          signoff: true
          delete-branch: true
          commit-message: update nginx version to ${{ steps.update.outputs.version }}
          branch: update-lua-resty-core-version
          title: update lua-resty-core version to ${{ steps.update.outputs.version }}
          body: update lua-resty-core version to ${{ steps.update.outputs.version }}
  lua-resty-lrucache-update:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: update lua-resty-lrucache version
        id: update
        run: |
          LRL_VER="$(
          git ls-remote --tags https://github.com/openresty/lua-resty-lrucache \
              | cut -d/ -f3 \
              | sort -V \
              | grep -v rc \
              | tail -1 \
              | sed "s|\^{}||g"
          )"
          sed -i "s|ARG LRL_VER=.*|ARG LRL_VER=$LRL_VER|" Dockerfile
          echo "version=$LRL_VER" >> $GITHUB_OUTPUT
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v7
        with:
          signoff: true
          delete-branch: true
          commit-message: update lua-resty-lrucache version to ${{ steps.update.outputs.version }}
          branch: update-lua-resty-lrucache-version
          title: update lua-resty-lrucache version to ${{ steps.update.outputs.version }}
          body: update lua-resty-lrucache version to ${{ steps.update.outputs.version }}
  ngx_http_geoip2_module-update:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: update ngx_http_geoip2_module version
        id: update
        run: |
          NHG2M_VER="$(
          git ls-remote --tags https://github.com/leev/ngx_http_geoip2_module \
              | cut -d/ -f3 \
              | sort -V \
              | grep -v rc \
              | tail -1
          )"
          sed -i "s|ARG NHG2M_VER=.*|ARG NHG2M_VER=$NHG2M_VER|" Dockerfile
          echo "version=$NHG2M_VER" >> $GITHUB_OUTPUT
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v7
        with:
          signoff: true
          delete-branch: true
          commit-message: update ngx_http_geoip2_module version to ${{ steps.update.outputs.version }}
          branch: update-ngx_http_geoip2_module-version
          title: update ngx_http_geoip2_module version to ${{ steps.update.outputs.version }}
          body: update ngx_http_geoip2_module version to ${{ steps.update.outputs.version }}
  nginx-ntlm-module-update:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: update nginx-ntlm-module version
        id: update
        run: |
          NNTLM_VER="$(
          git ls-remote --tags https://github.com/gabihodoroaga/nginx-ntlm-module \
              | cut -d/ -f3 \
              | sort -V \
              | grep -v rc \
              | tail -1
          )"
          sed -i "s|ARG NNTLM_VER=.*|ARG NNTLM_VER=$NNTLM_VER|" Dockerfile
          echo "version=$NNTLM_VER" >> $GITHUB_OUTPUT
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v7
        with:
          signoff: true
          delete-branch: true
          commit-message: update nginx-ntlm-module version to ${{ steps.update.outputs.version }}
          branch: update-nginx-ntlm-module-version
          title: update nginx-ntlm-module version to ${{ steps.update.outputs.version }}
          body: update nginx-ntlm-module version to ${{ steps.update.outputs.version }}
  liboqs-update:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: update liboqs version
        id: update
        run: |
          LIBOQS_VER="$(
          git ls-remote --tags https://github.com/open-quantum-safe/liboqs \
              | cut -d/ -f3 \
              | sort -V \
              | grep -v rc \
              | grep "^v\?[0-9]" \
              | tail -1
          )"
          sed -i "s|ARG LIBOQS_VER=.*|ARG LIBOQS_VER=$LIBOQS_VER|" Dockerfile
          echo "version=$LIBOQS_VER" >> $GITHUB_OUTPUT
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v7
        with:
          signoff: true
          delete-branch: true
          commit-message: update liboqs version to ${{ steps.update.outputs.version }}
          branch: update-liboqs-version
          title: update liboqs version to ${{ steps.update.outputs.version }}
          body: update liboqs version to ${{ steps.update.outputs.version }}
  oqs-provider-update:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: update oqs-provider version
        id: update
        run: |
          OQSPROVIDER_VER="$(
          git ls-remote --tags https://github.com/open-quantum-safe/oqs-provider \
              | cut -d/ -f3 \
              | sort -V \
              | grep -v rc \
              | grep "^v\?[0-9]" \
              | tail -1
          )"
          sed -i "s|ARG OQSPROVIDER_VER=.*|ARG OQSPROVIDER_VER=$OQSPROVIDER_VER|" Dockerfile
          echo "version=$OQSPROVIDER_VER" >> $GITHUB_OUTPUT
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v7
        with:
          signoff: true
          delete-branch: true
          commit-message: update oqs-provider version to ${{ steps.update.outputs.version }}
          branch: update-oqs-provider-version
          title: update oqs-provider version to ${{ steps.update.outputs.version }}
          body: update oqs-provider version to ${{ steps.update.outputs.version }}