Function RunUpdateWorkflows

pkg/cli/update_command.go:198–248

RunUpdateWorkflows updates workflows from their source repositories. Each workflow is compiled immediately after update.

(ctx context.Context, opts UpdateWorkflowsOptions)

// RunUpdateWorkflows updates workflows from their source repositories.
// Each workflow is compiled immediately after update.
func RunUpdateWorkflows(ctx context.Context, opts UpdateWorkflowsOptions) error {
	updateLog.Printf("Starting update process: workflows=%v, allowMajor=%v, force=%v, noMerge=%v, disableReleaseBump=%v, noCompile=%v, noRedirect=%v, coolDown=%v", opts.WorkflowNames, opts.AllowMajor, opts.Force, opts.NoMerge, opts.DisableReleaseBump, opts.NoCompile, opts.NoRedirect, opts.CoolDown)

	var firstErr error

	if err := UpdateWorkflows(ctx, opts); err != nil {
		firstErr = fmt.Errorf("workflow update failed: %w", err)
	}

	// Update GitHub Actions versions in actions-lock.json.
	// By default all actions are updated to the latest major version.
	// Pass --no-release-bump to revert to only forcing updates for core (actions/*) actions.
	updateLog.Printf("Updating GitHub Actions versions in actions-lock.json: allowMajor=%v, disableReleaseBump=%v", opts.AllowMajor, opts.DisableReleaseBump)
	if err := UpdateActions(ctx, opts.AllowMajor, opts.Verbose, opts.DisableReleaseBump, opts.CoolDown); err != nil {
		// Non-fatal: warn but don't fail the update
		fmt.Fprintln(os.Stderr, console.FormatWarningMessage(fmt.Sprintf("Warning: Failed to update actions-lock.json: %v", err)))
	}

	// Update action references in user-provided steps within workflow .md files.
	// By default all org/repo@version references are updated to the latest major version.
	updateLog.Print("Updating action references in workflow .md files")
	if err := UpdateActionsInWorkflowFiles(ctx, opts.WorkflowsDir, opts.EngineOverride, opts.Verbose, opts.DisableReleaseBump, opts.NoCompile, opts.CoolDown); err != nil {
		// Non-fatal: warn but don't fail the update
		fmt.Fprintln(os.Stderr, console.FormatWarningMessage(fmt.Sprintf("Warning: Failed to update action references in workflow files: %v", err)))
	}

	// Resolve and store SHA-256 digest pins for container images referenced in lock files.
	// This runs after compilation (via UpdateActionsInWorkflowFiles) so that the lock files
	// already reflect the current AWF version; stale pins from superseded versions are pruned
	// and new versions are resolved in a single pass.
	updateLog.Print("Updating container image digest pins")
	newContainerPins, err := UpdateContainerPins(ctx, opts.WorkflowsDir, opts.Verbose)
	if err != nil {
		// Non-fatal: Docker may not be available in all environments.
		fmt.Fprintln(os.Stderr, console.FormatWarningMessage(fmt.Sprintf("Warning: Failed to update container pins: %v", err)))
	}

	// Recompile all workflows when new container pins were added so that the
	// lock files embed the digest-pinned image references (image:tag@sha256:…).
	if newContainerPins && !opts.NoCompile {
		updateLog.Print("Recompiling workflows to embed new container digest pins")
		fmt.Fprintln(os.Stderr, console.FormatInfoMessage("Recompiling workflows to embed container digest pins..."))
		recompileErr := recompileAllWorkflows(ctx, opts.WorkflowsDir, opts.EngineOverride, opts.Verbose)
		if recompileErr != nil {
			fmt.Fprintln(os.Stderr, console.FormatWarningMessage(fmt.Sprintf("Warning: Failed to recompile workflows after container pin update: %v", recompileErr)))
		}
	}

	updateLog.Printf("Update process complete: had_error=%v", firstErr != nil)
	return firstErr
}

// recompileAllWorkflows recompiles all .md workflow files in the given directory.
// This is used after container pin updates to embed digest-pinned image references