GHA submodule updates.

Author: vladd-bit

.github/workflows/docker-build.yml

@@ -73,6 +73,7 @@ jobs:
           provenance: false
           push: true
 
+
       - name: Build & push singleuser (amd64)
         id: su
         uses: docker/build-push-action@v6
@@ -187,7 +188,6 @@ jobs:
             type=raw,value=latest,enable=${{ github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v') }}
             type=ref,event=branch,enable=${{ github.event_name != 'pull_request' }}
             type=sha,format=short
-
       - uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}

.github/workflows/submodule_sync.yml

@@ -14,6 +14,7 @@ jobs:
   sync:
     name: 'Submodules Sync'
     runs-on: ubuntu-22.04
+    if: github.actor != 'github-actions[bot]'
 
     defaults:
       run:
@@ -24,16 +25,30 @@ jobs:
         uses: actions/checkout@v5
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
-          submodules: true
+          submodules: recursive
+          persist-credentials: false
+
+      - name: Sync submodule URLs
+        run: |
+          git submodule sync --recursive
 
       - name: Update submodules
         run: |
-          git submodule update --init --remote --recursive
+          git -c protocol.version=2 submodule update --init --remote --recursive --jobs 8
 
       - name: Commit and push submodule updates
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          git config --global user.name 'Git bot'
-          git config --global user.email '[email protected]'
-          git remote set-url origin https://x-access-token:${{ secrets.GITHUB_TOKEN }}@github.com/${{ github.repository }}
-          git add .
-          git diff --quiet && echo "No changes to commit" || (git commit -m "Auto updated submodule references" && git push)
+          set -euo pipefail
+          git config user.name 'github-actions[bot]'
+          git config user.email '41898282+github-actions[bot]@users.noreply.github.com'
+          git remote set-url origin https://x-access-token:${GH_TOKEN}@github.com/${{ github.repository }}
+          # Stage only submodule pointer updates and .gitmodules
+          git add .gitmodules $(git config -f .gitmodules --get-regexp path | awk '{print $2}') || true
+          if git diff --cached --quiet; then
+            echo "No submodule pointer changes to commit"
+            exit 0
+          fi
+          git commit -m "chore(submodules): auto-update pointers [skip ci]"
+          git push