dependencies.yaml

---
# SPDX-License-Identifier: Apache-2.0
# SPDX-FileCopyrightText: 2024 The Linux Foundation <https://linuxfoundation.org>

name: "♻️ Update Dependencies"

# yamllint disable-line rule:truthy
on:
  workflow_dispatch:
  schedule:
    - cron: "0 8 1 * *"
  # push:
  #   branches:
  #     - "**"
  #     - "!update-devops-tooling"
  #     - "!**/update-pdm-lock"

env:
  python-version: 3.11

jobs:
  repository:
    name: "Repository Checks"
    uses: os-climate/osc-github-devops/.github/workflows/repository.yaml@main
    permissions:
      # Required for action that creates labels: github-mandatory-labels
      contents: write

  python-dependencies:
    name: "Update Python Dependencies"
    needs:
      - repository
    # Only run if Python code is present in repository
    if: needs.repository.outputs.python_project  == 'true' ||
      needs.repository.outputs.jupyter_notebooks  == 'true'
    runs-on: ubuntu-latest
    permissions:
      # IMPORTANT: mandatory to raise the PR
      id-token: write
      pull-requests: write
      repository-projects: write
      contents: write
    env:
      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    steps:
      - uses: actions/checkout@v4

      - name: "Set up Python"
        uses: actions/setup-python@v5
        with:
          python-version: ${{ env.python-version }}

      - name: "Update Python dependencies"
        uses: pdm-project/update-deps-action@v1.9
        with:
          sign-off-commit: "true"
          token: ${{ github.token }}
          commit-message: "Chore: Update dependencies and pdm.lock [skip ci]"
          pr-title: "Update Python module dependencies"
          update-strategy: eager
          # Whether to install PDM plugins before update
          install-plugins: "false"