Add update-dependencies workflow

.github/workflows/publish.yaml

@@ -1,6 +1,7 @@
 name: Build, publish & deploy
 
 on:
+  workflow_dispatch:
   push:
     branches:
       - master

.github/workflows/test.yaml

@@ -1,6 +1,7 @@
 name: Test
 
 on:
+  workflow_dispatch:
   workflow_call:
   pull_request:
     branches: [ "master" ]

.github/workflows/update-dependencies.yaml

@@ -0,0 +1,39 @@
+name: Update dependencies
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 18 * * TUE'
+
+permissions:
+  pull-requests: write
+  contents: write
+
+jobs:
+  update:
+    name: Update dependencies
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+        with:
+          ref: master
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: '3.11'
+          cache: pip
+      - name: Update dependencies
+        run: |
+          pip install pip-tools invoke
+          invoke update-dependencies --no-sync
+      - name: Create Pull Request
+        uses: peter-evans/create-pull-request@v4
+        id: create-pull-request
+        with:
+          token: ${{ secrets.PERSONAL_TOKEN_PR }}
+          commit-message: Update dependencies
+          base: master
+          branch: update-dependencies
+          title: Update dependencies
+          delete-branch: true

tasks.py

@@ -20,8 +20,17 @@ COMPOSE_BUILD_ENV = {"COMPOSE_FILE": COMPOSE_BUILD_FILE}
 
 
 @task
-def update_dependencies(ctx: Context) -> None:
+def update_dependencies(ctx: Context, *, sync: bool = True) -> None:
-    common_args = "-q --allow-unsafe --resolver=backtracking --upgrade"
+    return compile_dependencies(ctx, update=True, sync=sync)
+
+
+@task
+def compile_dependencies(
+    ctx: Context, *, update: bool = False, sync: bool = False
+) -> None:
+    common_args = "-q --allow-unsafe --resolver=backtracking"
+    if update:
+        common_args += " --upgrade"
     with ctx.cd(BASE_DIR):
         ctx.run(
             f"pip-compile {common_args} --generate-hashes requirements.in",
@@ -38,6 +47,13 @@ def update_dependencies(ctx: Context) -> None:
             pty=True,
             echo=True,
         )
+    if sync:
+        sync_dependencies(ctx)
+
+
+@task
+def sync_dependencies(ctx: Context) -> None:
+    with ctx.cd(BASE_DIR):
         ctx.run("pip-sync requirements.txt requirements-dev.txt", pty=True, echo=True)