sync_python_deps.yml

---
name: Update Python dependencies with PDM
# Other dependencies updates are managed by renovatebot

on:
  schedule:
    - cron: "0 12 * * SAT"
  workflow_dispatch:

permissions:
  contents: write
  pull-requests: write

jobs:
  update-dependencies:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
        with:
          persist-credentials: false

      - name: Update dependencies with PDM
        uses: pdm-project/update-deps-action@22852fcff9a131d732730e8db92cc9502643a260 # v1.12
        with:
          # The personal access token, default: ${{ github.token }}
          token: ${{ github.token }}
          # The commit message"
          commit-message: "chore(deps): Update pdm.lock"
          # The PR title
          pr-title: "chore(deps): Update Python dependencies with PDM"
          # The update strategy, can be 'reuse', 'eager' or 'all'
          update-strategy: all
          # Whether to install PDM plugins before update
          install-plugins: "true"
          # Whether commit message contains signed-off-by
          sign-off-commit: "true"