Files
php-curl-class/.github/workflows/outdated-track.yml
T
dependabot[bot] 6dadfd2d38 ⬆ Bump astral-sh/setup-uv from 10.3.0 to 10.3.2 (#1229)
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.3.0 to 10.3.2.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/v10.3.0...v10.3.2)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-26 10:04:56 +00:00

91 lines
3.5 KiB
YAML

name: Track outdated dependencies
on:
schedule:
# Stagger from the other scheduled workflows that write to master so each PR merges before the next one opens.
# Run before outdated-update-packages.yml, which reads the JSON this job updates.
- cron: '0 18 * * 1-4'
workflow_dispatch:
jobs:
run:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v7
with:
persist-credentials: false
- name: Set up uv
uses: astral-sh/setup-uv@v10.3.2
with:
enable-cache: true
cache-dependency-glob: scripts/make_release_requirements.txt
- name: Gather requirements
id: check-outdated
run: |
uv venv --seed venv
source venv/bin/activate
uv pip install --requirement scripts/make_release_requirements.txt
outdated="$(pip list --outdated --format json | jq)"
outdated_count="$(echo "$outdated" | jq 'length')"
outdated="$(echo "${outdated}" | jq "[{\"outdated_count\":\"${outdated_count}\"}] + .")"
outdated="$(echo "${outdated}" | jq 'map(if .latest_filetype == "wheel" then del(.latest_filetype) else . end)')"
echo -e "${outdated}" |
npx --yes prettier --parser jsonc --trailing-comma all > scripts/make_release_requirements.json
git diff --color
changes="$(git diff)"
delimiter="$(openssl rand -hex 8)"
echo "changes<<${delimiter}" >> "${GITHUB_OUTPUT}"
echo "${changes}" >> "${GITHUB_OUTPUT}"
echo "${delimiter}" >> "${GITHUB_OUTPUT}"
- name: Create or update pull request
id: cpr
uses: peter-evans/create-pull-request@v8
with:
commit-message: Update outdated dependencies list
labels: cleanup-no-release-required, dependencies, github_actions
title: ⬆ Update outdated dependencies list
body: |
```diff
${{ steps.check-outdated.outputs.changes }}
```
author: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
branch: create-pull-request/outdated
committer: GitHub <noreply@github.com>
delete-branch: true
token: ${{ secrets.PHP_CURL_CLASS_BOT_TOKEN }}
push-to-fork: php-curl-class-helper/php-curl-class
env:
GITHUB_TOKEN: ${{ secrets.PHP_CURL_CLASS_BOT_TOKEN }}
- name: Pull request created or updated
if: ${{ steps.cpr.outputs.pull-request-number }}
run: |
echo "Pull request: ${{ steps.cpr.outputs.pull-request-url }}"
- name: Approve outdated dependencies pull request
if: ${{ steps.cpr.outputs.pull-request-number }}
run: |
review_status="$(
gh pr view "${PR_URL}" \
--json="reviewDecision" \
--jq=".reviewDecision"
)"
echo "Pull request review status: ${review_status}"
if [[ "${review_status}" != "APPROVED" ]]; then
gh pr review --approve "${PR_URL}"
fi
env:
PR_URL: ${{ steps.cpr.outputs.pull-request-url }}
GITHUB_TOKEN: ${{ secrets.PHP_CURL_CLASS_TOKEN }}
- name: Enable auto-merge for outdated dependencies pull request
if: ${{ steps.cpr.outputs.pull-request-number }}
run: |
gh pr merge --auto --squash "${PR_URL}"
env:
PR_URL: ${{ steps.cpr.outputs.pull-request-url }}
GITHUB_TOKEN: ${{ secrets.PHP_CURL_CLASS_TOKEN }}