name: Update dependencies

on:
  workflow_dispatch:
  schedule:
    - cron: '0 6 * * 1'  # "At 06:00 on Monday."

jobs:
  update-dependencies:
    name: Update dependencies
    if: github.repository_owner == 'pypa' || github.event_name != 'schedule'
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v3
    - uses: actions/setup-python@v3
      with:
        python-version: "3.11-dev"
    - uses: excitedleigh/setup-nox@v2.1.0

    - name: "Run update: dependencies"
      run: nox --force-color -s update_constraints
    - name: "Run update: python configs"
      run: nox --force-color -s update_pins
    - name: "Run update: docs user projects"
      run: nox --force-color -s update_proj -- --auth=${{ secrets.GITHUB_TOKEN }}

    # we use this step to grab a Github App auth token, so that PRs generated by this workflow
    # run the GHA tests.
    - uses: tibdex/github-app-token@v1
      id: generate-token
      if: github.ref == 'refs/heads/main' && github.repository == 'pypa/cibuildwheel'
      with:
        app_id: ${{ secrets.CIBUILDWHEEL_BOT_APP_ID }}
        private_key: ${{ secrets.CIBUILDWHEEL_BOT_APP_PRIVATE_KEY }}

    - name: Create Pull Request
      if: github.ref == 'refs/heads/main' && github.repository == 'pypa/cibuildwheel'
      uses: peter-evans/create-pull-request@v4
      with:
        commit-message: Update dependencies
        title: '[Bot] Update dependencies'
        body: |
          Update the versions of our dependencies.

          PR generated by "Update dependencies" [workflow](https://github.com/${{github.repository}}/actions/runs/${{github.run_id}}).
        branch: update-dependencies-pr
        committer: "cibuildwheel-bot[bot] <83877280+cibuildwheel-bot[bot]@users.noreply.github.com>"
        author: "cibuildwheel-bot[bot] <83877280+cibuildwheel-bot[bot]@users.noreply.github.com>"
        token: ${{ steps.generate-token.outputs.token }}
        delete-branch: true