update-dotnet-sdk.yml

name: update-dotnet-sdk

on:
  schedule:
    - cron:  '0 12 * * WED'
  workflow_dispatch:

permissions: {}

jobs:
  update-dotnet-sdk:
    uses: martincostello/update-dotnet-sdk/.github/workflows/update-dotnet-sdk.yml@758e92b362c4164925583874878423a794cce239 # v3.4.1
    permissions:
      contents: read
    with:
      labels: "dependencies,.NET"
      update-nuget-packages: false
      user-email: '138034000+polly-updater-bot[bot]@users.noreply.github.com'
      user-name: 'polly-updater-bot[bot]'
    secrets:
      application-id: ${{ secrets.POLLY_UPDATER_BOT_APP_ID }}
      application-private-key: ${{ secrets.POLLY_UPDATER_BOT_KEY }}

  add-security-label:
    needs: update-dotnet-sdk
    permissions:
      pull-requests: write
    runs-on: ubuntu-latest
    if : |
      needs.update-dotnet-sdk.outputs.sdk-updated =='true' &&
      needs.update-dotnet-sdk.outputs.security == 'true'
    steps:
    - name: Add security label
      env:
        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        PR_URL: ${{ needs.update-dotnet-sdk.outputs.pull-request-html-url }}
      run: gh pr edit "${PR_URL}" --add-label security