diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml index 7c4b9c9..7629a45 100644 --- a/.github/dependabot.yaml +++ b/.github/dependabot.yaml @@ -1,9 +1,5 @@ version: 2 updates: - - package-ecosystem: "pip" - directory: "/" - schedule: - interval: "weekly" - package-ecosystem: "docker" directory: "/" schedule: diff --git a/.github/workflows/update-dependencies.yaml b/.github/workflows/update-dependencies.yaml index 27bb996..7ec9004 100644 --- a/.github/workflows/update-dependencies.yaml +++ b/.github/workflows/update-dependencies.yaml @@ -3,11 +3,10 @@ name: Update dependencies on: workflow_dispatch: schedule: - - cron: '0 18 * * TUE' + - cron: '0 18 * * MON' permissions: - pull-requests: write - contents: write + contents: read jobs: update: @@ -27,11 +26,17 @@ jobs: run: | pip install pip-tools invoke invoke update-dependencies --no-sync + - name: Generate token + uses: tibdex/github-app-token@v1 + id: generate-token + with: + app_id: ${{ secrets.PR_APP_ID }} + private_key: ${{ secrets.PR_APP_PRIVATE_KEY }} - name: Create Pull Request uses: peter-evans/create-pull-request@v4 id: create-pull-request with: - token: ${{ secrets.PERSONAL_TOKEN_PR }} + token: ${{ steps.generate-token.outputs.token }} commit-message: Update dependencies base: master branch: update-dependencies