Function resolveLatestCommitFromDefaultBranch

pkg/cli/update_workflows.go:301–322

resolveLatestCommitFromDefaultBranch fetches the latest commit SHA from the default branch of a repo. This is used when the source field is pinned to a commit SHA with no branch information — in that case we can only logically track the default branch.

(ctx context.Context, repo, currentSHA string, verbose bool)

// to a commit SHA with no branch information — in that case we can only
// logically track the default branch.
func resolveLatestCommitFromDefaultBranch(ctx context.Context, repo, currentSHA string, verbose bool) (string, error) {
	// Get the default branch name
	defaultBranch, err := getRepoDefaultBranchCached(ctx, repo)
	if err != nil {
		return "", fmt.Errorf("failed to get default branch for %s: %w", repo, err)
	}

	updateLog.Printf("Source is pinned to commit SHA, tracking default branch %q of %s", defaultBranch, repo)
	if verbose {
		fmt.Fprintln(os.Stderr, console.FormatVerboseMessage(fmt.Sprintf("Source has no branch ref, tracking default branch %q", defaultBranch)))
	}

	// Get the latest commit SHA from the default branch
	latestSHA, err := getLatestBranchCommitSHACached(ctx, repo, defaultBranch)
	if err != nil {
		return "", fmt.Errorf("failed to get latest commit for default branch %s: %w", defaultBranch, err)
	}

	updateLog.Printf("Latest commit on default branch %s: %s (current: %s)", defaultBranch, latestSHA, currentSHA)

	return latestSHA, nil
}

// getRepoDefaultBranchCached wraps getRepoDefaultBranch with a cache to avoid
// repeating identical GitHub API calls during batched update runs.