on:
  workflow_dispatch:
    inputs:
      package:
        required: true
        type: string
        description: package name such as `sentry-arroyo`
      version:
        required: true
        type: string
        description: desired version such as `1.2.3`, or `latest` to pull the latest version from PyPI
      pr_options:
        type: string
        default: ''
        description: additional options for gh pr create, such as for asking for specific reviewers

  # for use in other (cron/scheduled) workflows to bump specific
  # company-internal dependencies on a more aggressive schedule
  workflow_call:
    inputs:
      package:
        required: true
        type: string
      version:
        required: true
        type: string
      pr_options:
        type: string
        default: ''

# disable all permissions -- we use the PAT's permissions instead
permissions: {}

jobs:
  bump-version:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
        with:
          token: ${{ secrets.BUMP_SENTRY_TOKEN }}
      - run: |
          set -euxo pipefail

          if [ "$VERSION" = latest ]; then
            VERSION="$(curl -sL https://pypi.org/pypi/$PACKAGE/json | jq -r .info.version)"
          fi

          git checkout -b "bot/bump-version/$PACKAGE/$VERSION"

          re="$(sed 's/[_-]/[_-]/g' <<< "$PACKAGE")"
          sed -i "s/^$re==.*/$PACKAGE==$VERSION/g" -- requirements*.txt
          sed -i "s/^$re>=.*/$PACKAGE>=$VERSION/g" -- requirements*.txt

          if git diff --exit-code; then
            exit 0
          fi

          git \
              -c user.name=getsentry-bot \
              -c user.email='10587625+getsentry-bot@users.noreply.github.com' \
              commit \
              --all \
              --message "ref: bump $PACKAGE to $VERSION" \
              --message "Co-Authored-By: $SENDER <$SENDER_ID+$SENDER@users.noreply.github.com>"

          git push origin HEAD --quiet

          gh pr create --fill ${{ inputs.pr_options }}
        env:
          GH_TOKEN: ${{ secrets.BUMP_SENTRY_TOKEN }}
          PACKAGE: ${{ inputs.package }}
          VERSION: ${{ inputs.version }}
          SENDER: ${{ github.event.sender.login }}
          SENDER_ID: ${{ github.event.sender.id }}