bump-dependencies.yml

name: Bump dependencies

on:
  workflow_dispatch:
  schedule:
    - cron:  '0 8 * * 1' # At 08:00 on Monday.

jobs:
  bump-dependencies:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v2
      - uses: actions/setup-python@v2
        with:
          python-version: '3.9'

      - run: python -m pip install poetry pre-commit
      - run: poetry lock
      - run: poetry export --without-hashes --with dev -f requirements.txt -o requirements_dev.txt
      - run: poetry export -f requirements.txt --without-hashes -o requirements.txt
      - run: pre-commit autoupdate
      - run: git status

      - name: Create Pull Request
        uses: peter-evans/create-pull-request@18f7dc018cc2cd597073088f7c7591b9d1c02672
        with:
          token: ${{ secrets.TRIGGER_WORKFLOW_KEY }}
          branch: bump-dependencies
          delete-branch: true
          commit-message: Bump dependencies
          title: 'Bump dependencies'
          body: |
            Weekly update of backend dependencies.
          labels: |
            :robot: bot
            test deployment