diff --git a/.github/workflows/schema-drift.yml b/.github/workflows/schema-drift.yml index c42c95a..9517a49 100644 --- a/.github/workflows/schema-drift.yml +++ b/.github/workflows/schema-drift.yml @@ -1,42 +1,16 @@ -# Weekly: does the newest Authentik release still have every operation and -# query parameter qbit-authentik uses? Downloads the release's schema.yml from -# goauthentik/authentik and runs SchemaDriftTest against it (no Docker, no -# credentials). A failure means: review the release notes before upgrading. name: authentik-schema-drift - -on: +'on': schedule: - - cron: "17 6 * * 1" + - cron: 17 6 * * 1 workflow_dispatch: inputs: version: - description: "Authentik version (e.g. 2026.10.0); empty = latest release" + description: Authentik version (e.g. 2026.10.0); empty = latest release required: false - permissions: contents: read - jobs: drift: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v4 - - uses: actions/setup-java@v4 - with: - distribution: temurin - java-version: "21" - cache: maven - - name: Resolve version and fetch its schema - env: - GH_TOKEN: ${{ github.token }} - INPUT_VERSION: ${{ inputs.version }} - run: | - version="${INPUT_VERSION}" - if [ -z "$version" ]; then - version=$(gh release view --repo goauthentik/authentik --json tagName -q .tagName | sed 's#^version/##') - fi - echo "Authentik $version" - curl -fsSL "https://raw.githubusercontent.com/goauthentik/authentik/version/${version}/schema.yml" -o "$RUNNER_TEMP/schema.yml" - echo "SCHEMA=$RUNNER_TEMP/schema.yml" >> "$GITHUB_ENV" - - name: Drift test - run: ./mvnw -B -q test -Dtest=SchemaDriftTest -Dsurefire.failIfNoSpecifiedTests=false -Dauthentik.schema.file="$SCHEMA" + uses: QRun-IO/qqq-orb/.github/workflows/qbit-schema-drift.yml@0f33ddadf88b9a1b940b8883782fe2000ee1d2bd + with: + version: ${{ inputs.version || '' }}