process_backports.yml

name: Process Backports

on:
  workflow_dispatch:
    inputs:
      issue:
        description: 'The Release Tracking Issue Number (e.g., 142)'
        required: true
        type: string

permissions:
  contents: write
  issues: write

jobs:
  process_backports:
    # Always gate GHA runs to ensure we are operating on a type:release labeled issue if metadata is queried
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v7
        with:
          fetch-depth: 0

      - name: Setup Bazel
        uses: bazel-contrib/setup-bazel@0.19.0
        with:
          bazelisk-version: 1.20.0

      - name: Configure Git Identity
        run: |
          git config --global user.name "github-actions[bot]"
          git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"

      - name: Process Pending Backports
        run: |
          bazel run //tools/private/release -- \
            process-backports --issue ${{ inputs.issue }}
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}