update_dependencies.yml

name: Update python dependencies

on:
  workflow_dispatch:
  schedule:
    - cron:  "5 3 * * MON"
  push:
    branches: 
      - update-dependencies-workflow

jobs:
  update-dependencies:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - uses: "opensafely-core/setup-action@v1"
      with:
        python-version: "3.12"
        install-just: false

    - uses: actions/create-github-app-token@v1
      id: generate-token
      with:
        app-id: ${{ secrets.CREATE_PR_APP_ID }}
        private-key: ${{ secrets.CREATE_PR_APP_PRIVATE_KEY }}

    - uses: opensafely-core/update-dependencies-action@v1
      with:
        token: ${{ steps.generate-token.outputs.token }}
        automerge: false
        update_command: |
          pip install pip-tools && \
          pip-compile -U requirements.dev.in && \
          pip-compile -U requirements.in