elizaos--eliza/.github/workflows/weekly-maintenance.yml

name: Weekly Maintenance

on:
  schedule:
    - cron: "0 0 * * 0" # Every Sunday at midnight UTC
  workflow_dispatch: # Manual trigger option

# Default to least privilege. Override per-job where needed.
permissions:
  contents: read

jobs:
  maintenance:
    runs-on: ${{ fromJSON(vars.HETZNER_FLEET_ONLINE == 'false' && '["ubuntu-24.04"]' || '["self-hosted","hetzner-robot"]') }}
    timeout-minutes: 30
    permissions:
      contents: write
      issues: write
      pull-requests: write
      id-token: write

    steps:
      - name: Checkout repository
        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
        with:
          fetch-depth: 0
          filter: blob:none

      - name: Setup Bun
        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6
        with:
          bun-version: canary

      - name: Run Weekly Maintenance
        # Don't fail the cron when the Anthropic API is unavailable (low
        # credit balance, rate limit, transient outage). Skipping a weekly
        # maintenance run is preferable to a perma-red scheduled workflow.
        continue-on-error: true
        uses: anthropics/claude-code-action@ba0aafd4308cbba7165f9f2cdb0cfbed5a3c99ce
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          track_progress: true

          prompt: |
            REPO: ${{ github.repository }}

            Perform weekly repository maintenance:

            1. Check for outdated dependencies using `bun outdated`
            2. Scan for security vulnerabilities using `bun x better-npm-audit audit`
            3. Review open issues older than 90 days
            4. Check for TODO/FIXME comments in recent commits (last 7 days)
            5. Verify README.md examples and docs are up to date
            6. Check for any failing or skipped tests

            **Important:** This is an elizaOS project - use `bun` for all package operations, never npm/yarn/pnpm.

            Create a single issue summarizing any findings with sections:
            - 🔒 Security Issues (if any)
            - 📦 Outdated Dependencies
            - 🐛 Stale Issues (>90 days)
            - 📝 TODO Comments Found
            - 📚 Documentation Status

            If critical security issues are found, also comment on relevant open PRs.

          # Claude CLI arguments for model and allowed tools
          claude_args: |
            --model claude-opus-4-7
            --allowedTools "Read,Bash(bun *),Bash(gh issue *),Bash(gh pr *),Bash(git *),Bash(grep *),Bash(find *)"