Fix projects.json update

Author: ryanjbaxter

.github/workflows/join-release-train.yml

@@ -126,19 +126,20 @@ jobs:
 
       - name: Update projects.json for release branch
         env:
+          GH_TOKEN: ${{ inputs.token || secrets.token || secrets.GH_ACTIONS_REPO_TOKEN }}
           PROJECT: ${{ inputs.project }}
           SOURCE_BRANCH: ${{ inputs.branch }}
           RELEASE_BRANCH: release/${{ steps.setup.outputs.release-version }}
           RELEASE_TRAIN: ${{ inputs.release-train }}
         run: |
-          python3 << 'PYEOF'
+          cat > /tmp/update_projects.py << 'PYEOF'
           import json, os, re, sys
 
-          project       = os.environ['PROJECT']
-          source_branch = os.environ['SOURCE_BRANCH']
+          project        = os.environ['PROJECT']
+          source_branch  = os.environ['SOURCE_BRANCH']
           release_branch = os.environ['RELEASE_BRANCH']
 
-          with open('config/projects.json') as f:
+          with open('/tmp/projects_original.json') as f:
               config = json.load(f)
 
           is_commercial = project.endswith('-commercial')
@@ -160,7 +161,6 @@ jobs:
 
           print(f"JDKs for {source_branch} in {base_project}/{src_type}: {jdks}")
 
-          # Ensure project entry and commercial section exist
           if base_project not in config:
               config[base_project] = {}
           if 'commercial' not in config[base_project]:
@@ -192,7 +192,6 @@ jobs:
               print("No changes needed to projects.json.")
               sys.exit(0)
 
-          # Serialize preserving compact single-line string arrays (matching existing style)
           raw = json.dumps(config, indent=2)
           def collapse_str_arrays(m):
               try:
@@ -204,20 +203,32 @@ jobs:
               return m.group(0)
           raw = re.sub(r'\[[\s\S]*?\]', collapse_str_arrays, raw)
 
-          with open('config/projects.json', 'w') as f:
+          with open('/tmp/projects_updated.json', 'w') as f:
               f.write(raw + '\n')
           print("projects.json written.")
           PYEOF
 
-          git config user.name "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
-          git add config/projects.json
-          if git diff --cached --quiet; then
-            echo "No changes to projects.json — nothing to commit."
+          # Fetch current projects.json and its blob SHA from main
+          file_response=$(gh api "repos/spring-cloud/spring-cloud-github-actions/contents/config/projects.json?ref=main")
+          current_sha=$(echo "$file_response" | jq -r '.sha')
+          echo "$file_response" | jq -r '.content' | tr -d '\n' | base64 -d > /tmp/projects_original.json
+          cp /tmp/projects_original.json /tmp/projects_updated.json
+
+          python3 /tmp/update_projects.py
+
+          if diff -q /tmp/projects_original.json /tmp/projects_updated.json > /dev/null 2>&1; then
+            echo "No changes to projects.json — nothing to push."
           else
-            git commit -m "Adding ${RELEASE_BRANCH} for ${PROJECT} as part of joining ${RELEASE_TRAIN}"
-            git push origin HEAD:main
-            echo "projects.json committed and pushed to main."
+            new_content_b64=$(base64 -w 0 /tmp/projects_updated.json)
+            jq -n \
+              --arg message "Adding ${RELEASE_BRANCH} for ${PROJECT} as part of joining ${RELEASE_TRAIN}" \
+              --arg content "$new_content_b64" \
+              --arg sha "$current_sha" \
+              '{message: $message, content: $content, sha: $sha, branch: "main"}' | \
+            gh api "repos/spring-cloud/spring-cloud-github-actions/contents/config/projects.json" \
+              --method PUT \
+              --input -
+            echo "projects.json updated on main."
           fi
 
       - name: Trigger release-train-join workflow and wait