update-dependencies.yml

name: Update dependencies

on:
  workflow_dispatch:
  schedule:
    - cron: '0 6 * * 1'  # "At 06:00 on Monday."

jobs:
  update-dependencies:
    name: Update dependencies
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v2
    - uses: excitedleigh/setup-nox@v2.0.0

    - name: "Run update: dependencies"
      run: nox --force-color -s update_constraints
    - name: "Run update: python configs"
      run: nox --force-color -s update_pins

    # we use this step to grab a Github App auth token, so that PRs generated by this workflow
    # run the GHA tests.
    - uses: tibdex/github-app-token@v1
      id: generate-token
      with:
        app_id: ${{ secrets.CIBUILDWHEEL_BOT_APP_ID }}
        private_key: ${{ secrets.CIBUILDWHEEL_BOT_APP_PRIVATE_KEY }}

    - name: Create Pull Request
      if: github.ref == 'refs/heads/master' && github.repository == 'joerick/cibuildwheel'
      uses: peter-evans/create-pull-request@v3
      with:
        commit-message: Update dependencies
        title: '[Bot] Update dependencies'
        body: |
          Update the versions of our dependencies.

          PR generated by "Update dependencies" [workflow](https://github.com/${{github.repository}}/actions/runs/${{github.run_id}}).
        branch: update-dependencies-pr
        token: ${{ steps.generate-token.outputs.token }}
        delete-branch: true