name: Weekly Lockfile Update

on:
  workflow_dispatch:
  schedule:
    # Every Thursday at 8:00 UTC
    - cron: "0 8 * * 4"

permissions:
  contents: write
  pull-requests: write

jobs:
  update-lockfile:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - uses: astral-sh/setup-uv@803947b9bd8e9f986429fa0c5a41c367cd732b41 # v7.2.1
        with:
          version: 0.9.5

      - name: Update lockfile
        run: |
          echo '## Updated Dependencies' > pr_body.md
          echo '' >> pr_body.md
          echo '```' >> pr_body.md
          uv lock --upgrade 2>&1 | tee -a pr_body.md
          echo '```' >> pr_body.md

      - name: Create pull request
        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v7
        with:
          commit-message: "chore: update uv.lock with latest dependencies"
          title: "chore: weekly dependency update"
          body-path: pr_body.md
          branch: weekly-lockfile-update
          delete-branch: true
          add-paths: uv.lock
          labels: dependencies