name: Issue Version Label Sync

on:
  issues:
    types:
      - opened
      - edited
      - reopened

permissions:
  contents: read

jobs:
  sync:
    if: ${{ github.event.issue.pull_request == null }}
    runs-on: ubuntu-24.04
    timeout-minutes: 10
    steps:
      - name: Mint triage bot token
        id: triage-token
        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
        with:
          app-id: 2484142
          private-key: ${{ secrets.PULSE_TRIAGE_APP_PRIVATE_KEY }}

      - name: Check out triage helper
        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
        with:
          persist-credentials: false
          sparse-checkout: |
            .github/scripts/issue-version-triage.cjs
          sparse-checkout-cone-mode: false

      - name: Sync issue version metadata
        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
        with:
          github-token: ${{ steps.triage-token.outputs.token }}
          script: |
            const triage = require(`${process.env.GITHUB_WORKSPACE}/.github/scripts/issue-version-triage.cjs`);
            await triage.syncLabels({ github, context, core });