From 5c5a95bab3f4e9a4e8d3f8991a779b065b9fefb4 Mon Sep 17 00:00:00 2001
From: guillermodotn <gleiro@redhat.com>
Date: Mon, 25 May 2026 13:27:55 +0000
Subject: [PATCH] chore: add workflow to sync dependabot PRs to development

---
 .github/workflows/sync-to-development.yml | 68 +++++++++++++++++++++++
 1 file changed, 68 insertions(+)
 create mode 100644 .github/workflows/sync-to-development.yml

diff --git a/.github/workflows/sync-to-development.yml b/.github/workflows/sync-to-development.yml
new file mode 100644
index 0000000..fe85f76
--- /dev/null
+++ b/.github/workflows/sync-to-development.yml
@@ -0,0 +1,68 @@
+# Sync to Development
+#
+# Cherry-picks merged dependabot PRs from master into the development branch.
+# Also posts a comment on new dependabot PRs to inform about the label.
+#
+# Usage:
+#   1. Create a "sync development" label in the GitHub repository.
+#   2. Add the label to a dependabot PR before merging.
+#   3. On merge, this workflow cherry-picks the commit into development.
+#
+# If the cherry-pick fails (e.g., due to conflicts), the workflow fails
+# and a notification is sent via the normal GitHub Actions failure alert.
+
+name: Sync to Development
+
+on:
+  pull_request:
+    branches:
+      - master
+    types: [opened, closed]
+
+jobs:
+  notify-sync-label:
+    if: >
+      github.event.action == 'opened' &&
+      github.actor == 'dependabot[bot]'
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+    steps:
+      - name: Comment sync label availability
+        uses: actions/github-script@v7
+        with:
+          script: |
+            github.rest.issues.createComment({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: context.issue.number,
+              body: 'Add the `sync development` label to this PR before merging to cherry-pick the changes into the `development` branch.'
+            })
+
+  sync-to-dev:
+    if: >
+      github.event.pull_request.merged == true &&
+      github.actor == 'dependabot[bot]' &&
+      contains(github.event.pull_request.labels.*.name, 'sync development')
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Set up Git
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+      - name: Cherry-pick into development
+        run: |
+          git checkout development
+          git pull origin development
+          git cherry-pick ${{ github.event.pull_request.merge_commit_sha }}
+          git push origin development