workflows: automatically recheck for updates when issue is closed

.github/workflows/event-issue.yml

@@ -0,0 +1,46 @@
+# Privileged workflow to process issue events
+
+name: Issue event
+
+on:
+  issues:
+    types: [opened, closed]
+
+permissions:
+  issues: write
+
+env:
+  GH_LABEL: update
+
+jobs:
+  issue-event:
+    name: Process
+    runs-on: ubuntu-latest
+    outputs:
+      bot-user: ${{ steps.bot-user.outputs.username }}
+    steps:
+      - name: Get bot username
+        id: bot-user
+        env:
+          GITHUB_TOKEN: ${{ secrets.OPENSLIDE_BOT_TOKEN }}
+        run: echo "username=$(gh api user -q .login)" >> $GITHUB_OUTPUT
+      - name: Label dependency issue
+        if: >-
+          github.event.action == 'opened' &&
+          github.actor == steps.bot-user.outputs.username &&
+          contains(github.event.issue.body, 'topic=dependencies')
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh issue edit -R "${{ github.repository }}" \
+              "${{ github.event.issue.number }}" \
+              --add-label $GH_LABEL
+  update-from-issue:
+    name: Check for updates
+    needs: issue-event
+    if: >-
+      github.event.action == 'closed' &&
+      github.event.issue.user.login == needs.issue-event.outputs.bot-user &&
+      contains(github.event.issue.body, 'topic=dependencies')
+    uses: ./.github/workflows/update-check.yml
+    secrets: inherit

.github/workflows/event-pr.yml

@@ -0,0 +1,35 @@
+# Privileged workflow to process PR events
+
+name: PR event
+
+on:
+  pull_request_target:
+    branches: [main]
+    types: [opened]
+
+permissions:
+  pull-requests: write
+
+env:
+  GH_LABEL: update
+
+jobs:
+  pr-event:
+    name: Process
+    runs-on: ubuntu-latest
+    steps:
+      - name: Get bot username
+        id: bot-user
+        env:
+          GITHUB_TOKEN: ${{ secrets.OPENSLIDE_BOT_TOKEN }}
+        run: echo "username=$(gh api user -q .login)" >> $GITHUB_OUTPUT
+      - name: Label dependency PR
+        if: >-
+          github.actor == steps.bot-user.outputs.username &&
+          contains(github.event.pull_request.body, 'topic=dependencies')
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh pr edit -R "${{ github.repository }}" \
+              "${{ github.event.number }}" \
+              --add-label $GH_LABEL

.github/workflows/update-check.yml

@@ -8,11 +8,14 @@ on:
     paths: ['meson/subprojects/*.wrap']
   schedule:
     - cron: '0 12 * * 1'
+  workflow_call:
   workflow_dispatch:
 
 permissions:
   contents: none
 
+concurrency: update-check
+
 env:
   GIT_BRANCH: update-${{ github.repository_owner }}
   GIT_NAME: OpenSlide Automation
@@ -78,6 +81,9 @@ jobs:
           $(cat stale-report)
           \`\`\`
 
+          I will automatically check wrapdb for updates when this issue is \
+          closed.
+
           <!-- topic=dependencies -->"
               if [ -z "$issue" ]; then
                   echo "Creating issue..."