mise-update-tool.yml

---
name: mise tool updates

on:
  schedule:
    - cron: '30 6 * * 1'
  workflow_dispatch:
    inputs:
      tools:
        description: Comma separated tools to upgrade. Leave empty to upgrade all local tools.
        required: false
        default: ''
      keep:
        description: Comma separated tools to exclude from the upgrade.
        required: false
        default: ''

permissions:
  contents: read

jobs:
  upgrade:
    runs-on: ubuntu-latest
    timeout-minutes: 10
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false

      - name: Generate GitHub token
        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
        id: generate-token
        with:
          client-id: ${{ secrets.CLIENT_ID }}
          private-key: ${{ secrets.APP_PRIVATE_KEY }}
          permission-contents: write
          permission-pull-requests: write
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Install mise
        uses: jdx/mise-action@9e7f7633ff6f6d6048a9418a68d48f288f50eb14 # v4.2.3

      - name: Upgrade local mise tools
        uses: jylenhof/mise-update-tool@75c0934d7e971d26eb632ca27807fae0894a81f2 # v1.0.2
        with:
          token: ${{ steps.generate-token.outputs.token }}
          tools: ${{ inputs.tools }}
          keep: ${{ inputs.keep }}
          pull-request-strategy: per-tool