update_deps.yml

name: update-deps

on:
  schedule:
    - cron: "0 10 * * *" # Run at 10 am every day
  workflow_dispatch:

jobs:
  check:
    runs-on: ubuntu-latest
    environment:
      name: protected-main-env
    steps:
      - name: Generate token
        id: generate_token
        uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2.0.6
        with:
          app-id: ${{ secrets.GH_APP_ID }}
          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}

      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
        with:
          token: ${{ steps.generate_token.outputs.token }}

      - name: Set up Python
        uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4.9.1
        with:
          python-version: 3.13

      - name: Update Dependencies
        run: |
          pip install poetry
          poetry update

      - name: Create Pull Request
        uses: peter-evans/create-pull-request@18f7dc018cc2cd597073088f7c7591b9d1c02672 # v3.14.0
        with:
          token: ${{ steps.generate_token.outputs.token }}
          commit-message: update dependencies
          title: Update Dependencies
          body: |
            Autogenerated PR to update all deps to latest versions
          branch: update-dependencies