update-deps.yaml

name: Update via Updatecli

on:
  workflow_dispatch:
  schedule:
    - cron: '0 0 * * 0'  # Every Sunday at midnight

jobs:
  update:
    runs-on: ubuntu-latest
    permissions:
      contents: write
      id-token: write
      pull-requests: write
    steps:
      # Checkout the repository
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup AWS credentials
        uses: aws-actions/configure-aws-credentials@v4.0.2
        with:
          role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
          aws-region: us-west-2

      - name: AWS Info
        run: aws sts get-caller-identity

      # Install and run updatecli
      - name: Setup updatecli
        uses: updatecli/updatecli-action@v2

      - name: Run updatecli
        run: |
          for config in updatecli/*.yaml; do
            updatecli apply --config $config
          done
        env:
          UPDATECLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Update binaries
        run: make update-binaries

      # Use Peter Evans Pull Request Action to create a pull request
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v6
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          commit-message: "feat: update dependencies"
          title: 'feat: update dependencies'
          body: |
            Updates dependencies using `updatecli`.

            To force github actions to run add an empty commit to this branch

            ```
            git fetch
            git checkout branch_name
            git commit --allow-empty -m "Trigger GitHub Actions"
            git push origin branch_name
            ```
          labels: automated-pr, update
          draft: false