pre-commit-autoupdate.yml

name: 'Linuxfabrik: Update pre-commit hooks'

on:
  schedule:
    - cron: '0 8 * * 1'
  workflow_dispatch: {}

permissions: 'read-all'

jobs:
  update:
    runs-on: 'ubuntu-latest'
    permissions:
      contents: 'write'
      pull-requests: 'write'
    steps:
      - name: 'Harden the runner (Audit all outbound calls)'
        uses: 'step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176' # v2.17.0
        with:
          egress-policy: 'audit'

      - name: 'Checkout repository'
        uses: 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd' # v6.0.2

      - name: 'Set up Python'
        uses: 'actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405' # v6.2.0
        with:
          python-version: '3.12'

      - name: 'Install pre-commit'
        run: 'pip install pre-commit==4.5.1'

      - name: 'Run pre-commit autoupdate'
        run: 'pre-commit autoupdate'

      - name: 'Create Pull Request'
        uses: 'peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0' # v8.1.0
        with:
          commit-message: 'chore: update pre-commit hooks'
          title: 'chore: update pre-commit hooks'
          body: 'Automatic pre-commit hook version update.'
          branch: 'chore/pre-commit-autoupdate'