Keep uv.lock updated and in sync

Dependabot does not support uv yet: astral-sh/uv#2512

.github/workflows/autofix.yaml

@@ -253,6 +253,48 @@ jobs:
           labels: "🤖 ci"
           branch: format-python
 
+  sync-uv-lock:
+    # XXX Dependabot does not support uv.lock files yet, so this job is doing it.
+    # See: https://github.com/astral-sh/uv/issues/2512
+    name: Sync uv.lock
+    needs:
+      - project-metadata
+    if: fromJSON(needs.project-metadata.outputs.is_python_project)
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/[email protected]
+      - uses: actions/[email protected]
+        with:
+          python-version: "3.12"
+          cache: "pip"
+          cache-dependency-path: |
+            **/pyproject.toml
+            *requirements.txt
+            requirements/*.txt
+      - name: Install uv
+        run: |
+          python -m pip install -r https://raw.githubusercontent.com/kdeldycke/workflows/main/requirements/uv.txt
+      - name: Sync uv.lock
+        run: |
+          uv sync --upgrade
+      - uses: peter-evans/[email protected]
+        with:
+          assignees: ${{ github.actor }}
+          commit-message: "[autofix] Sync uv.lock"
+          title: "[autofix] Sync `uv.lock`"
+          body: >
+            <details><summary><code>Workflow metadata</code></summary>
+
+
+            > [Auto-generated on run `#${{ github.run_id }}`](${{ github.event.repository.html_url }}/actions/runs/${{
+            github.run_id }}) by `${{ github.job }}` job from [`docs.yaml`](${{ github.event.repository.html_url
+            }}/blob/${{ github.sha }}/.github/workflows/docs.yaml) workflow.
+
+
+            </details>
+          labels: "📦 dependencies"
+          branch: sync-uv-lock
+
   format-markdown:
     name: Format Markdown
     runs-on: ubuntu-22.04

changelog.md

@@ -5,6 +5,8 @@
 > \[!IMPORTANT\]
 > This version is not released yet and is under active development.
 
+- Add a new job to keep `uv.lock` updated and in sync.
+
 ## [4.2.1 (2024-07-15)](https://github.com/kdeldycke/workflows/compare/v4.2.0...v4.2.1)
 
 - Fix options in `gha-utils mailmap-sync` calls.