name: UV Lock Upgrade

on:
  schedule:
    # run at midnight every Sunday
    - cron: '0 0 * * 0'
  # allow manual triggering
  workflow_dispatch:

permissions:
  contents: write
  pull-requests: write

jobs:
  upgrade-dependencies:
    runs-on: ubuntu-latest
    
    steps:
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
      
      - name: Set up uv
        uses: ./.github/actions/uv_setup
        with:
          python-version: "3.10"
          cache-suffix: "uv-lock-upgrade"
          
      - name: Run uv lock --upgrade in all Python packages
        run: make lock-upgrade
          
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          commit-message: "chore(deps): upgrade dependencies with `uv lock --upgrade`"
          title: "chore(deps): upgrade dependencies with `uv lock --upgrade`"
          body: |
            This PR updates the dependencies in all Python packages using `uv lock --upgrade`.
            
            This is an automated PR created by the UV Lock Upgrade workflow.
          branch: deps/uv-lock-upgrade
          delete-branch: true
          labels: |
            dependencies