chore(ci): add bi-monthly cargo upgrade workflow

Author: pRizz

.github/workflows/cargo-upgrades.yml

@@ -0,0 +1,147 @@
+name: Upgrade Cargo Dependencies
+
+on:
+  schedule:
+    # 5th and 20th at 9am Chicago time (15:00 UTC)
+    - cron: '0 15 5,20 * *'
+  workflow_dispatch: # Allow manual trigger
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  cargo-upgrade:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Install Rust
+        uses: dtolnay/rust-toolchain@master
+        with:
+          toolchain: "1.88"
+
+      - name: Install cargo-edit
+        run: cargo install cargo-edit --locked
+
+      - name: Install cargo-audit
+        run: cargo install cargo-audit --locked
+
+      - name: Install just
+        uses: extractions/setup-just@v3
+
+      - name: Run cargo upgrade, test, and audit
+        id: upgrade
+        run: |
+          set +e
+
+          updates_dir="${RUNNER_TEMP}"
+          upgrade_output_path="${updates_dir}/cargo-upgrade-output.txt"
+          upgrade_output_plain_path="${updates_dir}/cargo-upgrade-output-plain.txt"
+          test_output_path="${updates_dir}/cargo-test-output.txt"
+          test_output_plain_path="${updates_dir}/cargo-test-output-plain.txt"
+          audit_output_path="${updates_dir}/cargo-audit-output.txt"
+          audit_output_plain_path="${updates_dir}/cargo-audit-output-plain.txt"
+
+          cargo upgrade --workspace --incompatible 2>&1 | tee "${upgrade_output_path}"
+          sed -E 's/\x1B\[[0-9;]*[A-Za-z]//g' "${upgrade_output_path}" > "${upgrade_output_plain_path}"
+
+          if git diff --quiet; then
+            echo "updates_available=false" >> $GITHUB_OUTPUT
+            exit 0
+          fi
+
+          echo "updates_available=true" >> $GITHUB_OUTPUT
+
+          just test-all-slow 2>&1 | tee "${test_output_path}"
+          test_exit=$?
+          sed -E 's/\x1B\[[0-9;]*[A-Za-z]//g' "${test_output_path}" > "${test_output_plain_path}"
+
+          cargo audit 2>&1 | tee "${audit_output_path}"
+          audit_exit=$?
+          sed -E 's/\x1B\[[0-9;]*[A-Za-z]//g' "${audit_output_path}" > "${audit_output_plain_path}"
+
+          echo "test_exit=${test_exit}" >> $GITHUB_OUTPUT
+          echo "audit_exit=${audit_exit}" >> $GITHUB_OUTPUT
+          echo "upgrade_output_plain_path=${upgrade_output_plain_path}" >> $GITHUB_OUTPUT
+          echo "test_output_plain_path=${test_output_plain_path}" >> $GITHUB_OUTPUT
+          echo "audit_output_plain_path=${audit_output_plain_path}" >> $GITHUB_OUTPUT
+          exit 0
+
+      - name: Prepare PR body
+        if: steps.upgrade.outputs.updates_available == 'true'
+        id: pr
+        run: |
+          body_path="${RUNNER_TEMP}/cargo-upgrade.md"
+          cat > "${body_path}" << 'HEADER'
+          ## Cargo dependency upgrades
+
+          This PR was automatically generated by the weekly cargo upgrade workflow.
+
+          ### Changes
+          HEADER
+          echo '```diff' >> "${body_path}"
+          git diff >> "${body_path}"
+          echo '```' >> "${body_path}"
+          cat >> "${body_path}" << EOF
+
+          ### Cargo Upgrade Output
+
+          \`\`\`
+          $(cat "${{ steps.upgrade.outputs.upgrade_output_plain_path }}")
+          \`\`\`
+          EOF
+          test_status="passed"
+          audit_status="passed"
+          if [ "${{ steps.upgrade.outputs.test_exit }}" != "0" ]; then
+            test_status="failed"
+          fi
+          if [ "${{ steps.upgrade.outputs.audit_exit }}" != "0" ]; then
+            audit_status="failed"
+          fi
+
+          cat >> "${body_path}" << EOF
+
+          ### Test Result
+
+          Status: **${test_status}**
+
+          \`\`\`
+          $(cat "${{ steps.upgrade.outputs.test_output_plain_path }}")
+          \`\`\`
+
+          ### Audit Result
+
+          Status: **${audit_status}**
+
+          \`\`\`
+          $(cat "${{ steps.upgrade.outputs.audit_output_plain_path }}")
+          \`\`\`
+          EOF
+          cat >> "${body_path}" << 'FOOTER'
+
+          ### Testing
+
+          - [ ] CI passed
+
+          ---
+          *Generated by [cargo-upgrades workflow](https://github.com/${{ github.repository }}/actions/workflows/cargo-upgrades.yml)*
+          FOOTER
+          echo "body_path=${body_path}" >> $GITHUB_OUTPUT
+
+      - name: Create Pull Request
+        if: steps.upgrade.outputs.updates_available == 'true'
+        uses: peter-evans/create-pull-request@v8
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          title: "chore(deps): cargo upgrade"
+          body-path: ${{ steps.pr.outputs.body_path }}
+          branch: cargo-dependency-upgrades
+          commit-message: "chore(deps): cargo upgrade"
+          labels: dependencies,security
+          delete-branch: true
+          add-paths: |
+            Cargo.lock
+            Cargo.toml
+            packages/core/Cargo.toml
+            packages/cli-rust/Cargo.toml