update-dependency-checksums.yml

name: UpdateChecksums
on:
  push:
    branches: [ renovate/** ]
    paths:
      - 'gradle/libs.versions.toml'

permissions: read-all

jobs:
  build:
    name: Dependency checksum pin action
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
        with:
          fetch-depth: 0
          token: ${{ secrets.PUBLISH_KEY }}
      - name: Set up JDK 17
        uses: actions/setup-java@387ac29b308b003ca37ba93a6cab5eb57c8f5f93 # v4.0.0
        with:
          distribution: temurin
          java-version: 17
      - name: "Remove previous version"
        run: cp gradle/verification-metadata-clean.xml gradle/verification-metadata.xml
      - name: "Update checksums"
        uses: gradle/gradle-build-action@982da8e78c05368c70dac0351bb82647a9e9a5d2 # v2.11.1
        with:
          cache-disabled: true
          arguments: --write-verification-metadata sha256
      - name: "Git commit"
        run: |
          git config --global user.name 'Esta Nagy'
          git config --global user.email 'nagyesta@gmail.com'
          git add gradle/verification-metadata.xml
          git commit -asm "Pinning dependency checksums {patch}"
          git push -f --set-upstream origin ${{ github.ref_name }}