lockfiles.yaml

name: Update Dependencies and Push to Github

on:
  # Allow API to be hit to trigger workflow.
  workflow_dispatch:

  # Every Monday at 1PM UTC (7AM EST)
  schedule:
    - cron: "0 11 * * 1"

jobs:
  push-update:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - uses: actions/setup-python@v5
        with:
          python-version-file: .python-version

      - name: "Update Lockfiles and Open PR"
        uses: tedivm/action-python-lockfile-update@v2
        with:
          pip_extras: "dev"
          # This key will bypass workflow limitations to ensure tests are run.
          # deploy_key: ${{ secrets.WRITEABLE_DEPLOY_KEY }}

        env:
          # Needed to open pull request- automatically set for all actions.
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}