checkout/.github/workflows/update-dependencies.yaml

name: Update dependencies

on:
  workflow_dispatch:
  schedule:
    - cron: '0 18 * * MON'

permissions:
  contents: read

env:
  PIP_DISABLE_PIP_VERSION_CHECK: 1

jobs:
  update:
    name: Update dependencies
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          ref: master
      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: '3.12'
          cache: pip
      - name: Update dependencies
        run: |
          pip install pip-tools invoke
          invoke update-dependencies --no-sync
      - name: Generate token
        uses: tibdex/github-app-token@v2
        id: generate-token
        with:
          app_id: ${{ secrets.PR_APP_ID }}
          private_key: ${{ secrets.PR_APP_PRIVATE_KEY }}
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v6
        id: create-pull-request
        with:
          token: ${{ steps.generate-token.outputs.token }}
          commit-message: Update dependencies
          base: master
          branch: update-dependencies
          title: Update dependencies
          delete-branch: true