Merge pull request #136 from PolicyEngine/feat/country-updater

feat: automated country package update workflow

Author: anth-volk

.github/scripts/update-package.sh

@@ -0,0 +1,72 @@
+#!/usr/bin/env bash
+#
+# Check if a Python package has a newer version on PyPI than what's
+# locked in uv.lock. If so, upgrade the lockfile and open a PR.
+#
+# Usage: ./update-package.sh <package-name>
+#
+# Requires: uv, gh (GitHub CLI), curl, jq, git
+# Environment: GH_TOKEN must be set for gh CLI
+
+set -euo pipefail
+
+PACKAGE="${1:?Usage: update-package.sh <package-name>}"
+
+# 1. Get current locked version from uv.lock
+CURRENT=$(grep -A1 "^name = \"${PACKAGE}\"$" uv.lock | grep 'version' | head -1 | sed 's/.*"\(.*\)"/\1/')
+if [[ -z "$CURRENT" ]]; then
+  echo "ERROR: Package '${PACKAGE}' not found in uv.lock"
+  exit 1
+fi
+echo "Current locked version: ${PACKAGE}==${CURRENT}"
+
+# 2. Get latest version from PyPI
+LATEST=$(curl -sf "https://pypi.org/pypi/${PACKAGE}/json" | jq -r .info.version)
+if [[ -z "$LATEST" ]]; then
+  echo "ERROR: Could not fetch latest version for '${PACKAGE}' from PyPI"
+  exit 1
+fi
+echo "Latest PyPI version:   ${PACKAGE}==${LATEST}"
+
+# 3. Compare
+if [[ "$CURRENT" == "$LATEST" ]]; then
+  echo "Already up to date. Nothing to do."
+  exit 0
+fi
+echo "Update available: ${CURRENT} -> ${LATEST}"
+
+# 4. Check if a PR already exists for this package+version
+EXISTING_PR=$(gh pr list --search "in:title update ${PACKAGE} to ${LATEST}" --state open --json number --jq '.[0].number' 2>/dev/null || true)
+if [[ -n "$EXISTING_PR" ]]; then
+  echo "PR #${EXISTING_PR} already exists for this update. Skipping."
+  exit 0
+fi
+
+# 5. Configure git author
+git config user.name "github-actions[bot]"
+git config user.email "github-actions[bot]@users.noreply.github.com"
+
+# 6. Update pinned version in pyproject.toml and upgrade lockfile
+echo "Updating ${PACKAGE} pin in pyproject.toml: ==${CURRENT} -> ==${LATEST}"
+sed -i "s/\"${PACKAGE}==${CURRENT}\"/\"${PACKAGE}==${LATEST}\"/" pyproject.toml
+
+echo "Running: uv lock --upgrade-package ${PACKAGE}"
+uv lock --upgrade-package "${PACKAGE}"
+
+if git diff --quiet uv.lock pyproject.toml; then
+  echo "No changes after upgrade. Nothing to do."
+  exit 0
+fi
+
+# 7. Create branch, commit, push, open PR
+BRANCH="auto/update-${PACKAGE}-${LATEST}"
+git checkout -b "$BRANCH"
+git add uv.lock pyproject.toml
+git commit -m "chore(deps): update ${PACKAGE} to ${LATEST}"
+git push -u origin "$BRANCH"
+
+gh pr create \
+  --title "chore(deps): update ${PACKAGE} to ${LATEST}" \
+  --body "Update ${PACKAGE} to ${LATEST}"
+
+echo "PR created for ${PACKAGE} ${CURRENT} -> ${LATEST}"

.github/workflows/update-country-packages.yml

@@ -0,0 +1,36 @@
+name: Update country packages
+
+on:
+  schedule:
+    - cron: "*/30 * * * *" # Every 30 minutes
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  update:
+    name: Update ${{ matrix.package }}
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        package: [policyengine-us, policyengine-uk]
+      fail-fast: false
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+
+      - name: Setup Python
+        run: uv python install 3.13
+
+      - name: Check for update and open PR
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          chmod +x .github/scripts/update-package.sh
+          .github/scripts/update-package.sh ${{ matrix.package }}

changelog.d/135.added

@@ -0,0 +1 @@
+Automated GitHub Actions workflow to check for country package updates and open PRs.

pyproject.toml

@@ -11,9 +11,9 @@ dependencies = [
     "psycopg2-binary>=2.9.10",
     "supabase>=2.10.0",
     "storage3>=0.8.1",
-    "policyengine>=3.2.1",
-    "policyengine-uk>=2.75.1",
-    "policyengine-us>=1.592.4",
+    "policyengine>=3.2.3",
+    "policyengine-uk==2.75.1",
+    "policyengine-us==1.592.4",
     "pydantic>=2.9.2",
     "pydantic-settings>=2.6.0",
     "rich>=13.9.4",