1
name: Dependency updater
2
 
3
on:
4
  schedule:
5
    # Run at 18:30 UTC every Monday
6
    - cron: '30 18 * * 1'
7
  # Allow manual triggering for testing
8
  workflow_dispatch:
9
 
10
concurrency:
11
  group: deps-updater
12
  cancel-in-progress: true
13
 
14
permissions:
15
  contents: read
16
 
17
jobs:
18
  issue:
19
    runs-on: ubuntu-latest
20
    permissions:
21
      contents: write
22
      pull-requests: write
23
    steps:
24
      - uses: actions/checkout@v6
25
        with:
26
          show-progress: false
27
          token: ${{ secrets.DEVPROD_PAT }}
28
          ref: main
29
      - name: Setup Runner
30
        uses: ./.github/actions/setup-runner
31
        with:
32
          GOOGLESOURCE_COOKIE: ${{ secrets.GOOGLESOURCE_COOKIE }}
33
      - name: Update dependencies
34
        run: build/deps/update-deps.py
35
        env:
36
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
37
      - name: Update rust dependencies
38
        run: bazel run @rules_rust//tools/upstream_wrapper:cargo -- update --manifest-path=deps/rust/Cargo.toml
39
      - name: Update opencode version
40
        run: python3 tools/update_opencode_version.py
41
        continue-on-error: true
42
      - name: Reformat changed files
43
        run: ./tools/cross/format.py git
44
      - name: Open pull request
45
        id: create-pr
46
        uses: peter-evans/create-pull-request@v8
47
        with:
48
          commit-message: "update dependencies to latest version"
49
          branch: "automatic-update-deps"
50
          title: "Update dependencies"
51
          token: ${{ secrets.DEVPROD_PAT }}
52
          author: "Workers DevProd <workers-devprod@cloudflare.com>"
53
          committer: "Workers DevProd <workers-devprod@cloudflare.com>"
54
          body: |
55
            This is an automated pull request for updating the dependencies of workerd.
56
          delete-branch: true
57
          add-paths: |
58
            build/deps/gen
59
            deps/rust
60
            .github/workflows
61
      - name: Enable Pull Request Automerge
62
        run: gh pr merge --rebase --auto ${{ steps.create-pr.outputs.pull-request-number }}
63
        env:
64
          GH_TOKEN: ${{ secrets.DEVPROD_PAT }}