fleet/.github/workflows/calendar-sync.yml

name: Sync release calendar

on:
  workflow_dispatch:
    inputs:
      apply:
        description: "Apply changes (false = dry-run, default)"
        required: true
        default: "false"
        type: choice
        options:
          - "false"
          - "true"

permissions:
  contents: read
  issues: read # required to read milestones via the GitHub Issues API

jobs:
  sync:
    runs-on: ubuntu-latest
    timeout-minutes: 10
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
        with:
          egress-policy: block
          # Only the endpoints this job actually needs: checkout + milestones
          # (GitHub), pip install (PyPI), and the Google Calendar API. If a run
          # is blocked, check the harden-runner insights and add the endpoint.
          allowed-endpoints: >
            github.com:443
            api.github.com:443
            objects.githubusercontent.com:443
            pypi.org:443
            files.pythonhosted.org:443
            oauth2.googleapis.com:443
            www.googleapis.com:443

      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          persist-credentials: false

      - name: Set up Python
        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
        with:
          python-version: "3.12"

      - name: Install dependencies
        working-directory: tools/release/calendar-sync
        run: pip install -r requirements.txt

      - name: Run sync
        working-directory: tools/release/calendar-sync
        env:
          GCAL_SERVICE_ACCOUNT_JSON: ${{ secrets.GCAL_SERVICE_ACCOUNT_JSON }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          if [ "${{ inputs.apply }}" = "true" ]; then
            python sync.py --apply --summary-file "$GITHUB_STEP_SUMMARY"
          else
            python sync.py --summary-file "$GITHUB_STEP_SUMMARY"
          fi