test: git push

Author: andhreljaKern

.github/workflows/pi_build.yml

@@ -6,15 +6,15 @@ on:
 # Special permissions required for OIDC authentication
 permissions:
   id-token: write
-  contents: write
+  contents: read
   actions: read
 
 env:
   GH_TOKEN: ${{ secrets.GH_TOKEN }}
 
 jobs:
   pi-diff:
-    name: 'Parent Images: Diff PI Types'
+    name: 'Parent Images: Diff Types'
     runs-on: ubuntu-latest
     environment: dev
     env:
@@ -40,17 +40,13 @@ jobs:
           bash cicd-deployment-scripts/pi/diff.sh \
             -p "${{ github.event.pull_request.number }}"
 
-  pi-build:
-    name: 'Parent Images: Docker Build'
+  pi-compile:
+    name: 'Parent Images: Compile Requirements'
     runs-on: ubuntu-latest
     needs: [pi-diff]
     environment: dev
     env:
       PYTHON_VERSION: ${{ vars.PYTHON_VERSION }}
-      DEV_CONTAINER_REGISTRY: ${{ vars.DEV_CONTAINER_REGISTRY }}
-      DEV_LOGIN_USERNAME: ${{ secrets.DEV_LOGIN_USERNAME }}
-      DEV_LOGIN_PASSWORD: ${{ secrets.DEV_LOGIN_PASSWORD }}
-      IMAGE_TAG: ${{ github.event_name == 'release' && github.event.release.tag_name || github.event.pull_request.head.ref }}
     strategy:
       matrix:
         parent_image_type: ${{ fromJson(needs.pi-diff.outputs.updated_parent_types) }}
@@ -83,10 +79,70 @@ jobs:
           pip-compile requirements/${{ matrix.parent_image_type }}-requirements.in
           
           cd ${{ github.workspace }}
-          git checkout -b ${{ github.event.pull_request.head.ref }}
+          git checkout ${{ github.event.pull_request.head.ref }} || git checkout -b ${{ github.event.pull_request.head.ref }}
+          git push origin ${{ github.event.pull_request.head.ref }} && git pull origin ${{ github.event.pull_request.head.ref }}
+
           git add submodules
-          git commit -m "${{ github.event.pull_request.title }}"
+          git commit -m "ci: update submodules to origin/${{ github.event.pull_request.head.ref }}" || true
           git push origin ${{ github.event.pull_request.head.ref }}
+
+          gh pr create \
+            --title "${{ github.event.pull_request.title }}" \
+            --body "${{ github.event.pull_request.body }}" \
+            --base dev \
+            --head ${{ github.event.pull_request.head.ref }} \
+            --repo ${{ github.repository_owner }}/refinery-${{ matrix.parent_image_type }}-parent-image
+          
+
+  pi-build:
+    name: 'Parent Images: Docker Build'
+    runs-on: ubuntu-latest
+    needs: [pi-diff, pi-compile]
+    environment: dev
+    env:
+      PYTHON_VERSION: ${{ vars.PYTHON_VERSION }}
+      DEV_CONTAINER_REGISTRY: ${{ vars.DEV_CONTAINER_REGISTRY }}
+      DEV_LOGIN_USERNAME: ${{ secrets.DEV_LOGIN_USERNAME }}
+      DEV_LOGIN_PASSWORD: ${{ secrets.DEV_LOGIN_PASSWORD }}
+      IMAGE_TAG: ${{ github.event_name == 'release' && github.event.release.tag_name || github.event.pull_request.head.ref }}
+    strategy:
+      matrix:
+        parent_image_type: ${{ fromJson(needs.pi-diff.outputs.updated_parent_types) }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          repository: '${{ github.repository_owner }}/refinery-${{ matrix.parent_image_type }}-parent-image'
+          submodules: 'true'
+
+      - name: GitHub Configuration
+        run: git config --global url."https://oauth2:${{ secrets.GH_TOKEN }}@github.com".insteadOf https://github.com
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ env.PYTHON_VERSION }}
+
+      - name: Install Dependencies
+        run: python -m pip install pip-tools
+      
+      - name: Compile Artifacts
+        run: |
+          cd ${{ github.workspace }}/submodules/parent-images
+          git checkout ${{ github.event.pull_request.head.ref }}
+          pip-compile requirements/${{ matrix.parent_image_type }}-requirements.in
+          
+          cd ${{ github.workspace }}
+          git checkout ${{ github.event.pull_request.head.ref }} || git checkout -b ${{ github.event.pull_request.head.ref }}
+          git push origin ${{ github.event.pull_request.head.ref }} && git pull origin ${{ github.event.pull_request.head.ref }}
+
+          git config user.email "devtools@kern.ai"
+          git config user.name "GitHub Actions"
+
+          git add submodules
+          git commit -m "ci: update submodules to origin/${{ github.event.pull_request.head.ref }}" || true
+          git push origin ${{ github.event.pull_request.head.ref }}
+
           gh pr create \
             --title "${{ github.event.pull_request.title }}" \
             --body "${{ github.event.pull_request.body }}" \