pre-commit-autoupdate.yml

name: 'Linuxfabrik: Update pre-commit hooks'

on:
  schedule:
    - cron: '0 5 * * 5'
  workflow_dispatch: {}

permissions: 'read-all'

jobs:
  update:
    runs-on: 'ubuntu-latest'
    steps:
      - name: 'Generate app token'
        id: 'app-token'
        uses: 'actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1' # v3.2.0
        with:
          app-id: '${{ vars.LF_AUTOMATION_APP_ID }}'
          private-key: '${{ secrets.LF_AUTOMATION_APP_PRIVATE_KEY }}'

      - name: 'Checkout repository'
        uses: 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd' # v6.0.2
        with:
          token: '${{ steps.app-token.outputs.token }}'

      - name: 'Set up Python'
        uses: 'actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405' # v6.2.0
        with:
          python-version: '3.12'

      - name: 'Install pre-commit'
        run: 'pip install --require-hashes --requirement .github/pre-commit/requirements.txt'

      - name: 'Run pre-commit autoupdate'
        run: 'pre-commit autoupdate'

      - name: 'Create Pull Request'
        uses: 'peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1' # v8.1.1
        with:
          token: '${{ steps.app-token.outputs.token }}'
          commit-message: 'chore: update pre-commit hooks'
          title: 'chore: update pre-commit hooks'
          body: 'Automatic pre-commit hook version update.'
          branch: 'chore/pre-commit-autoupdate'