name: Weekly Lockfile Update

on:
  workflow_dispatch:
  schedule:
    # Every Thursday at 8:00 UTC
    - cron: "0 8 * * 4"

permissions:
  contents: write
  pull-requests: write

jobs:
  update-lockfile:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          persist-credentials: false

      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
        with:
          version: 0.9.5

      - name: Update lockfile
        run: |
          echo '## Updated Dependencies' > pr_body.md
          echo '' >> pr_body.md
          echo '```' >> pr_body.md
          uv lock --upgrade 2>&1 | tee -a pr_body.md
          echo '```' >> pr_body.md

      - name: Create pull request
        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
        with:
          commit-message: "chore: update uv.lock with latest dependencies"
          sign-commits: true
          title: "chore: weekly dependency update"
          body-path: pr_body.md
          branch: weekly-lockfile-update
          delete-branch: true
          add-paths: uv.lock
          labels: dependencies