# Copia in: .gitea/workflows/maintenance.yml
# Trigger:
#   - PR merged           → cleanup branch sorgente
#   - Ogni lunedì 08:00   → security audit vulnerabilità (settimanale)
#   - Ogni 1° del mese    → controllo pacchetti obsoleti (mensile)
#   - Manuale             → workflow_dispatch (esegue tutti i job di manutenzione)

name: Maintenance

on:
  pull_request:
    types: [closed]
  schedule:
    - cron: '0 8 * * 1'    # ogni lunedì alle 08:00 → security audit
    - cron: '0 8 1 * *'    # ogni 1° del mese alle 08:00 → outdated check
  workflow_dispatch:

jobs:
  branch-cleanup:
    if: gitea.event_name == 'pull_request' && gitea.event.pull_request.merged == true
    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
    secrets: inherit

  dependency-audit:
    if: >
      gitea.event_name == 'workflow_dispatch' ||
      (gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 * * 1')
    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/dependency-check.yml@v1
    secrets: inherit

  dependency-outdated:
    if: >
      gitea.event_name == 'workflow_dispatch' ||
      (gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 1 * *')
    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/dependency-outdated.yml@v1
    secrets: inherit