name: Issue Version Label Sync

on:
  issues:
    types:
      - opened
      - edited
      - reopened

permissions:
  contents: read

jobs:
  sync:
    if: ${{ github.event.issue.pull_request == null }}
    runs-on: ubuntu-24.04
    timeout-minutes: 10
    steps:
      - name: Mint triage bot token
        id: triage-token
        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
        with:
          app-id: 2484142
          private-key: ${{ secrets.PULSE_TRIAGE_APP_PRIVATE_KEY }}

      - name: Check out triage helper
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
          sparse-checkout: |
            .github/scripts/issue-version-triage.cjs
          sparse-checkout-cone-mode: false

      - name: Sync issue version metadata
        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
        with:
          github-token: ${{ steps.triage-token.outputs.token }}
          script: |
            const triage = require(`${process.env.GITHUB_WORKSPACE}/.github/scripts/issue-version-triage.cjs`);
            await triage.syncLabels({ github, context, core });