deps: update updatecli workflow

Signed-off-by: Olivier Vernin <olivier@vernin.me>

Author: olblak

.github/workflows/updatecli.yaml

@@ -3,7 +3,7 @@ on:
   release:
   workflow_dispatch:
   schedule:
-    # Run at 12:00 every Saterday every 14 days
+    # Run at 12:00 every 14 days
     - cron: 0 12 */14 * *
 
 jobs:
@@ -16,7 +16,7 @@ jobs:
       - name: "Setup updatecli"
         uses: "updatecli/updatecli-action@5ca36367fadc6ad94d590984fd9c696e783ec635" # v2.96.0
         with:
-          version: "v0.113.0-rc.1"
+          version: "v0.114.0"
 
       - name: "Set up Go"
         uses: "actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c" # v6.1.0

.github/workflows/updatecli_test.yaml

@@ -16,7 +16,7 @@ jobs:
       - name: "Setup updatecli"
         uses: "updatecli/updatecli-action@5ca36367fadc6ad94d590984fd9c696e783ec635" # v2.96.0
         with:
-          version: "v0.113.0-rc.1"
+          version: "v0.114.0"
 
       - name: "Set up Go"
         uses: "actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c" # v6.1.0
@@ -28,5 +28,5 @@ jobs:
         run: "updatecli compose diff"
         env:
           # This step is executed in untrusted context. We use a GitHub token with minimal permissions.
-          GITHUB_ACTOR: ${{ github.actor }}
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          UPDATECLI_GITHUB_USERNAME: ${{ github.actor }}
+          UPDATECLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/updatecli_update.yaml

@@ -26,6 +26,16 @@ jobs:
           go-version-file: "go.mod"
         id: go
 
+      - name: "Run updatecli only on monitored pipelines"
+        run: updatecli compose apply --clean-git-branches=true --labels="monitoring:enabled" --experimental
+        env:
+          UPDATECLI_GITHUB_APP_CLIENT_ID: ${{ secrets.UPDATECLIBOT_APP_ID }}
+          UPDATECLI_GITHUB_APP_PRIVATE_KEY: ${{ secrets.UPDATECLIBOT_APP_PRIVKEY }}
+          UPDATECLI_GITHUB_APP_INSTALLATION_ID: ${{ secrets.UPDATECLIBOT_APP_INSTALLATION_ID }}
+          UPDATECLI_UDASH_API_URL: ${{ secrets.UPDATECLI_UDASH_API_URL }}
+          UPDATECLI_UDASH_ACCESS_TOKEN: ${{ secrets.UPDATECLI_UDASH_ACCESS_TOKEN }}
+          UPDATECLI_UDASH_URL: ${{ secrets.UPDATECLI_UDASH_URL }}
+
       - name: "Run updatecli only on existing pipelines"
         run: updatecli compose apply --clean-git-branches=true --existing-only=true --experimental
         env:

updatecli-compose.yaml

@@ -37,3 +37,9 @@ policies:
     policy: ghcr.io/updatecli/policies/autodiscovery/githubaction:0.2.1@sha256:cfddec11464cc09615135f0f1e069f00ad24d28edc7cc6a4e8224e04c3699008
     values:
       - updatecli/values.d/scm.yaml
+
+  - name: Update Updatecli version in GitHub action
+    policy: ghcr.io/updatecli/policies/updatecli/githubaction:0.7.0
+    values:
+      - updatecli/values.d/scm.yaml
+      - updatecli/values.d/githubaction.yaml