name: backport
on:
  pull_request_target:
    types: [closed, labeled]

permissions: {}

jobs:
  backport:
    permissions:
      contents: write
      pull-requests: write
    name: Backport Pull Request
    if: github.event.pull_request.merged
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
        with:
          persist-credentials: true

      - uses: actions/create-github-app-token@v3
        id: app-token
        with:
          app-id: ${{ vars.BACKPORT_APP }}
          private-key: ${{ secrets.BACKPORT_KEY }}

      - name: Create backport PR
        id: backport
        uses: korthout/backport-action@7c3f6cd5843cac11bc59a04a1b7699af93261670 # v4.5.0
        with:
          pull_title: "backport: ${pull_title}"
          label_pattern: "^ci:backport ([^ ]+)$"
          github_token: ${{ steps.app-token.outputs.token }}

      - name: Enable automerge
        if: ${{ steps.backport.outputs.was_successful == 'true' }}
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          CREATED_PULL_NUMBERS: ${{ steps.backport.outputs.created_pull_numbers }}
        run: |
          gh pr merge --rebase --auto "${CREATED_PULL_NUMBERS}"