sync.yml

name: sync-environments

# Weekly reconciliation of published Databricks environments against this repo.
# Runs Mon-Fri pacing aside, once a week is enough for upstream cadence; opens a PR
# when an environment drifts or a new version is published. Never commits to main.

on:
  schedule:
    - cron: "0 6 * * 1"          # Mondays 06:00 UTC
  workflow_dispatch: {}

permissions:
  contents: write
  pull-requests: write

jobs:
  sync:
    # GitHub-hosted ubuntu-latest runners use ephemeral IPs that the databricks org's
    # IP allow list rejects (checkout fails with a 403). linux-ubuntu-latest is part of
    # the databricks-protected-runner-group, which is inside the allowed network.
    runs-on: linux-ubuntu-latest
    timeout-minutes: 15
    steps:
      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1

      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
        with:
          python-version: "3.12"

      - name: Regenerate artifacts from published docs
        run: python .github/scripts/sync.py

      - name: Open PR if anything changed
        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
        with:
          branch: sync/environments
          title: "Sync environment constraints from published docs"
          commit-message: "Sync environment constraints from published docs"
          body: |
            Automated weekly sync of `python/` against the Databricks release notes.

            - **DRIFT** — an existing environment's pinned versions changed upstream.
            - **NEW** — a newly published environment version.

            Review the diff and merge if it looks correct. Generated by
            `.github/scripts/sync.py`.
          labels: automated, environments-sync
          reviewers: rugpanov, rclarey, anton-107
          delete-branch: true