update-dependencies.yml

name: Update dependencies

on:
  pull_request:
    paths:
      - '.github/workflows/update-dependencies.yml'
  workflow_dispatch:
  schedule:
    - cron: '0 18 * * 5'  # "At 18:00 on Friday."

env:
  FORCE_COLOR: '1'

jobs:
  update-dependencies:
    name: Update dependencies
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - uses: wntrblm/nox@2024.10.09
      with:
        python-versions: "3.12"
    - name: "Install uv"
      run: pipx install uv
    - name: "Setup bot user"
      run: |
        git config --global user.name "manylinux-bot[bot]"
        git config --global user.email "89297709+manylinux-bot[bot]@users.noreply.github.com"
    # we use this step to grab a Github App auth token, so that lastversion can query GitHub API
    # without rate-limit and PRs get run by GHA.
    - uses: actions/create-github-app-token@v1
      id: generate-token
      if: github.ref == 'refs/heads/main' && github.repository == 'pypa/manylinux'
      with:
        app_id: ${{ secrets.MANYLINUX_BOT_APP_ID }}
        private_key: ${{ secrets.MANYLINUX_BOT_APP_PRIVATE_KEY }}
    - name: "Run update native dependencies"
      run: nox -s update_native_dependencies
      env:
        GITHUB_API_TOKEN: ${{ steps.generate-token.outputs.token || github.token }}
    - name: "Run update downloaded interpreters"
      run: nox -s update_interpreters_download
    - name: "Run update python dependencies"
      run: nox -s update_python_dependencies
    - name: Create Pull Request
      if: github.ref == 'refs/heads/main' && github.repository == 'pypa/manylinux'
      uses: peter-evans/create-pull-request@v7
      with:
        commit-message: Update python dependencies
        title: '[Bot] Update dependencies'
        body: |
          Update the versions of our dependencies.

          PR generated by "Update dependencies" [workflow](https://github.com/${{github.repository}}/actions/runs/${{github.run_id}}).
        branch: update-dependencies-pr
        sign-commits: true
        token: ${{ steps.generate-token.outputs.token }}
        delete-branch: true