name: Pnpm dedupe on Dependabot PRs

on:
  push:
    branches:
      - "dependabot/npm_and_yarn/*"
    paths:
      - "pnpm-lock.yaml"

permissions:
  contents: write

jobs:
  deduplicate:
    name: Deduplicate
    if: github.actor == 'dependabot[bot]'
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 1

      - name: Set up pnpm
        uses: pnpm/action-setup@v4
        with:
          version: latest

      - name: Set up Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 22

      - name: pnpm install
        run: pnpm install --frozen-lockfile

      - run: pnpm dedupe

      - name: Git push
        run: |
          git config --global user.email "ci@ci.invalid"
          git config --global user.name "Discourse CI"
          git add pnpm-lock.yaml
          git status
          git commit -m "pnpm dedupe [dependabot skip]" && git push origin "HEAD:${GITHUB_HEAD_REF}" || echo "done"