Created watch-upstream-dnscrypt.yml

Checks for DNSCrypt proxy updates daily

Author: xtr0py

.github/workflows/watch-upstream-dnscrypt.yml

@@ -0,0 +1,67 @@
+name: Watch upstream dnscrypt-proxy releases (update testing)
+
+on:
+  schedule:
+    - cron: "0 9 * * *"   # once per day at 09:00 UTC
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  bump:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout testing branch
+        uses: actions/checkout@v4
+        with:
+          ref: testing
+
+      - name: Get latest upstream release version
+        id: upstream
+        shell: bash
+        run: |
+          LATEST="$(curl -fsSL https://api.github.com/repos/DNSCrypt/dnscrypt-proxy/releases/latest \
+            | python -c "import sys,json; print(json.load(sys.stdin)['tag_name'].lstrip('v'))")"
+
+          echo "Latest upstream version: $LATEST"
+          echo "latest=$LATEST" >> "$GITHUB_OUTPUT"
+
+      - name: Update DNSCRYPT_PROXY_VERSION if needed
+        id: update
+        shell: bash
+        run: |
+          CURRENT="$(cat DNSCRYPT_PROXY_VERSION 2>/dev/null || true)"
+          LATEST="${{ steps.upstream.outputs.latest }}"
+
+          echo "Current version in repo: $CURRENT"
+          echo "Latest upstream version: $LATEST"
+
+          # Nothing to do if empty or unchanged
+          if [ -z "$LATEST" ] || [ "$CURRENT" = "$LATEST" ]; then
+            echo "No update needed."
+            echo "changed=false" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+
+          echo "Updating DNSCRYPT_PROXY_VERSION to $LATEST"
+          echo "$LATEST" > DNSCRYPT_PROXY_VERSION
+          echo "changed=true" >> "$GITHUB_OUTPUT"
+
+      - name: Create PR into testing
+        if: steps.update.outputs.changed == 'true'
+        uses: peter-evans/create-pull-request@v6
+        with:
+          branch: chore/bump-dnscrypt-proxy
+          base: testing
+          title: "chore: bump dnscrypt-proxy to ${{ steps.upstream.outputs.latest }}"
+          commit-message: "chore: bump dnscrypt-proxy to ${{ steps.upstream.outputs.latest }}"
+          body: |
+            This PR automatically updates DNSCRYPT_PROXY_VERSION
+            to the latest upstream dnscrypt-proxy release: ${{ steps.upstream.outputs.latest }}
+
+            When merged, the testing branch will rebuild the Docker image
+            and publish new :testing and :testing-<version> tags.
+          labels: dependencies