name: "[Dependency Updates] Auto Approve"
on:
  pull_request:
    types: [opened, synchronize]

permissions: {}

jobs:
  approve-automatic-prs:
    runs-on: ubuntu-latest
    timeout-minutes: 2
    # 158783068: homarr-renovate[bot]
    # 190541745: homarr-crowdin[bot]
    # 210161987: homarr-update-contributors[bot]
    # 175486441: homarr-releases[bot]
    # Extracted from https://api.github.com/users/<username>
    if: github.actor_id == 158783068 || github.actor_id == 190541745 || github.actor_id == 210161987 || github.actor_id == 175486441
    steps:
      - name: Checkout code
        uses: actions/checkout@v7
      - name: Obtain token
        id: obtainToken
        uses: actions/create-github-app-token@v3
        with:
          private-key: ${{ secrets.RENOVATE_APPROVE_PRIVATE_KEY }}
          client-id: ${{ secrets.RENOVATE_APPROVE_APP_ID }}
          permission-pull-requests: write # required to approve pull request

      - name: Install GitHub CLI
        run: sudo apt-get install -y gh
      - name: Approve automatic PRs
        env:
          GITHUB_TOKEN: ${{ steps.obtainToken.outputs.token }}
        run: |
          gh pr review ${{github.event.pull_request.number}} --approve --body "Automatically approved by GitHub Action"