update_dependencies.yml

name: Update depencies in poetry lockfile

on:
  schedule:
    - cron:  '0 1 * * 1'
  push:
  workflow_dispatch:

jobs:
  update_dependencies:
    runs-on: ubuntu-latest
    steps:
      # Check out repo and set up Python
      - uses: actions/checkout@v3
        with:
          lfs: true

      - uses: tibdex/github-app-token@v1
        id: generate-token
        with:
          app_id: ${{ secrets.APP_ID }}
          private_key: ${{ secrets.APP_PRIVATE_KEY }}

      # Use cached python and dependencies, install poetry
      - name: "Setup Python, Poetry and Dependencies"
        uses: packetcoders/action-setup-cache-python-poetry@main
        with:
          python-version: 3.8
          poetry-version: 1.2.2

      # update poetry lockfile
      - name: "Update poetry lock file"
        id: update
        run: |
          poetry run poetry self update
          exec 5>&1
          UPDATE_OUTPUT=$(poetry run poetry update|tee >(cat - >&5))
          echo "UPDATE_OUTPUT<<EOF" >> $GITHUB_OUTPUT
          echo "$UPDATE_OUTPUT" >> $GITHUB_OUTPUT
          echo "EOF" >> $GITHUB_OUTPUT

          STATUS=$(git status | grep poetry.lock)
          echo "STATUS=$STATUS" >> $GITHUB_OUTPUT

      # create pull request if necessary
      - name: "Create Pull Request"
        uses: peter-evans/create-pull-request@v5
        if: ${{ contains(steps.update.outputs.STATUS, 'poetry.lock') }}
        with:
          token: ${{ steps.generate-token.outputs.token }}
          commit-message: Update dependencies
          title: "Update dependencies"
          body: |
            Dependency updates using Poetry:
            ${{ steps.update.outputs.UPDATE_OUTPUT }}