From f5efea2160aa9c227943524d5727aae8f6a0d511 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Joachim=20Schl=C3=B6ffel?= <me@joachim-schloeffel.com>
Date: Sat, 26 Sep 2026 23:51:50 +0200
Subject: [PATCH] add package update status badge

---
 .gitea/workflows/build.yml          | 20 +++++++------------
 .gitea/workflows/package-status.yml | 30 +++++++++++++++++++++++++++++
 README.md                           |  2 ++
 3 files changed, 39 insertions(+), 13 deletions(-)
 create mode 100644 .gitea/workflows/package-status.yml

diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 24d6630..720567f 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -1,8 +1,6 @@
 name: Build Alpine Packages
 
 on:
-  schedule:
-    - cron: "17 5 * * 1"
   push:
     branches:
       - "**"
@@ -67,13 +65,11 @@ jobs:
           fi
 
       - name: Prepare package cache
-        if: github.event_name != 'schedule'
         id: package-selection
         run: |
           scripts/apk/ci-package-cache.sh prepare
 
       - name: Build packages
-        if: github.event_name != 'schedule'
         run: |
           scripts/apk/ci-build.sh
           if [ -d packages/local ]; then
@@ -81,11 +77,10 @@ jobs:
           fi
 
       - name: Export GreptimeDB CI assets
-        if: github.event_name != 'schedule' && steps.package-selection.outputs.greptimedb_selected == 'true'
+        if: steps.package-selection.outputs.greptimedb_selected == 'true'
         run: scripts/apk/export-ci-assets.sh
 
       - name: Check artifact upload support
-        if: github.event_name != 'schedule'
         id: artifact-upload
         run: |
           if [ -n "${ACTIONS_RUNTIME_TOKEN:-}" ]; then
@@ -95,14 +90,14 @@ jobs:
           fi
 
       - name: Upload generated CI assets
-        if: github.event_name != 'schedule' && steps.package-selection.outputs.greptimedb_selected == 'true' && steps.artifact-upload.outputs.available == 'true'
+        if: steps.package-selection.outputs.greptimedb_selected == 'true' && steps.artifact-upload.outputs.available == 'true'
         uses: actions/upload-artifact@v3
         with:
           name: greptimedb-musl-binaries-${{ matrix.alpine_registry_branch }}
           path: packages/ci-assets/
 
       - name: Upload local Alpine registry
-        if: github.event_name != 'schedule' && steps.package-selection.outputs.packages_selected == 'true' && steps.artifact-upload.outputs.available == 'true'
+        if: steps.package-selection.outputs.packages_selected == 'true' && steps.artifact-upload.outputs.available == 'true'
         uses: actions/upload-artifact@v3
         with:
           name: alpine-local-registry-${{ matrix.alpine_registry_branch }}-${{ github.sha }}
@@ -110,11 +105,10 @@ jobs:
           retention-days: 30
 
       - name: Smoke test
-        if: github.event_name != 'schedule'
         run: scripts/apk/ci-smoke.sh
 
       - name: Generate security reports
-        if: github.event_name != 'schedule' && env.ALPINE_SKIP_BUILD != '1'
+        if: env.ALPINE_SKIP_BUILD != '1'
         run: |
           scripts/apk/security-report.sh
           if [ -n "${GITHUB_STEP_SUMMARY:-}" ]; then
@@ -124,16 +118,16 @@ jobs:
           fi
 
       - name: Upload security reports
-        if: github.event_name != 'schedule' && env.ALPINE_SKIP_BUILD != '1' && steps.artifact-upload.outputs.available == 'true'
+        if: env.ALPINE_SKIP_BUILD != '1' && steps.artifact-upload.outputs.available == 'true'
         uses: actions/upload-artifact@v3
         with:
           name: apk-security-reports-${{ matrix.alpine_registry_branch }}
           path: packages/security-reports/
 
       - name: Runtime test
-        if: github.event_name != 'schedule' && env.ALPINE_SKIP_BUILD != '1'
+        if: env.ALPINE_SKIP_BUILD != '1'
         run: scripts/apk/runtime-test.sh
 
       - name: Publish Alpine packages
-        if: github.event_name != 'schedule' && github.ref == 'refs/heads/main' && env.ALPINE_SKIP_BUILD != '1'
+        if: github.ref == 'refs/heads/main' && env.ALPINE_SKIP_BUILD != '1'
         run: scripts/apk/publish-gitea.sh
diff --git a/.gitea/workflows/package-status.yml b/.gitea/workflows/package-status.yml
new file mode 100644
index 0000000..09fdc8f
--- /dev/null
+++ b/.gitea/workflows/package-status.yml
@@ -0,0 +1,30 @@
+name: Package Update Status
+
+on:
+  schedule:
+    - cron: "17 5 * * 1"
+  workflow_dispatch:
+
+jobs:
+  package-status:
+    runs-on: ubuntu-latest
+    container:
+      image: alpine:3.24
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+
+      - name: Check packaged upstream versions
+        run: |
+          apk add --no-cache bash curl git jq
+          APK_UPDATE_CHECK_MODE=warn scripts/apk/outdated.sh > update-check.txt
+          cat update-check.txt
+          if [ -n "${GITHUB_STEP_SUMMARY:-}" ]; then
+            {
+              echo "## Upstream package update check"
+              echo
+              echo '```text'
+              cat update-check.txt
+              echo '```'
+            } >> "$GITHUB_STEP_SUMMARY"
+          fi
diff --git a/README.md b/README.md
index 3ed04b4..424b955 100644
--- a/README.md
+++ b/README.md
@@ -1,5 +1,7 @@
 # Alpine Packages
 
+[![Package update check](https://code.factoring.digital/public/alpine-packages/actions/workflows/package-status.yml/badge.svg?branch=main&event=schedule)](https://code.factoring.digital/public/alpine-packages/actions?workflow=package-status.yml)
+
 Alpine stable packaging for internal packages. This repository carries selected
 upstream releases ahead of Alpine community packages when we need newer
 features, packaging fixes, or service layouts on the current Alpine branch.