add autoupdate workflow

Author: Ninja3047

.github/workflows/pre-commit-autoupdate.yml

@@ -0,0 +1,60 @@
+name: Pre-commit Autoupdate
+
+on:
+  schedule:
+    # Run weekly on Monday at 9am UTC
+    - cron: "0 9 * * 1"
+  workflow_dispatch:
+
+permissions: {}
+
+jobs:
+  autoupdate:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Generate GitHub App token
+        uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2
+        id: app-token
+        with:
+          app-id: ${{ vars.AUTOMATION_APP_ID }}
+          private-key: ${{ secrets.AUTOMATION_APP_PRIVATE_KEY }}
+
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          token: ${{ steps.app-token.outputs.token }}
+          persist-credentials: true
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
+
+      - name: Run prek autoupdate
+        working-directory: "{{cookiecutter.project_slug}}"
+        run: uvx prek autoupdate --freeze --cooldown-days 7
+
+      - name: Create Pull Request
+        env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+        run: |
+          if git diff --quiet; then
+            echo "No changes to commit"
+            exit 0
+          fi
+
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+          branch="pre-commit-autoupdate"
+          git checkout -b "$branch"
+          git add -A
+          git commit -m "build(deps): update pre-commit hooks"
+          git push --force origin "$branch"
+
+          if gh pr view "$branch" &>/dev/null; then
+            echo "PR already exists"
+          else
+            gh pr create \
+              --title "build(deps): update pre-commit hooks" \
+              --body "Automated update of pre-commit hooks using \`prek autoupdate --freeze --cooldown-days 7\`.
+
+          This PR was auto-generated by the pre-commit-autoupdate workflow."
+          fi

cookiecutter.json

@@ -31,6 +31,7 @@
     "_copy_without_render": [
         ".github/workflows/docs.yml",
         ".github/workflows/lint.yml",
+        ".github/workflows/pre-commit-autoupdate.yml",
         ".github/workflows/tests.yml",
         ".github/workflows/zizmor.yml"
     ],

{{cookiecutter.project_slug}}/.github/workflows/pre-commit-autoupdate.yml

@@ -0,0 +1,59 @@
+name: Pre-commit Autoupdate
+
+on:
+  schedule:
+    # Run weekly on Monday at 9am UTC
+    - cron: "0 9 * * 1"
+  workflow_dispatch:
+
+permissions: {}
+
+jobs:
+  autoupdate:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Generate GitHub App token
+        uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2
+        id: app-token
+        with:
+          app-id: ${{ vars.AUTOMATION_APP_ID }}
+          private-key: ${{ secrets.AUTOMATION_APP_PRIVATE_KEY }}
+
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          token: ${{ steps.app-token.outputs.token }}
+          persist-credentials: true
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
+
+      - name: Run prek autoupdate
+        run: uvx prek autoupdate --freeze --cooldown-days 7
+
+      - name: Create Pull Request
+        env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+        run: |
+          if git diff --quiet; then
+            echo "No changes to commit"
+            exit 0
+          fi
+
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+          branch="pre-commit-autoupdate"
+          git checkout -b "$branch"
+          git add -A
+          git commit -m "build(deps): update pre-commit hooks"
+          git push --force origin "$branch"
+
+          if gh pr view "$branch" &>/dev/null; then
+            echo "PR already exists"
+          else
+            gh pr create \
+              --title "build(deps): update pre-commit hooks" \
+              --body "Automated update of pre-commit hooks using \`prek autoupdate --freeze --cooldown-days 7\`.
+
+          This PR was auto-generated by the pre-commit-autoupdate workflow."
+          fi