dependency-update.yml

name: Dependency Update

on:
  schedule:
    - cron: '0 0 * * 1'  # Weekly on Monday
  workflow_dispatch:

permissions:
  contents: read
  pull-requests: write

jobs:
  update-dependencies:
    name: Update Dependencies
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up Go
        uses: actions/setup-go@v5
        with:
          go-version: '1.25.x'  # Use stable version for dependency updates
          cache: true
          check-latest: true

      - name: Update dependencies
        run: |
          go get -u ./...
          go mod tidy
          go mod verify

      - name: Check for changes
        id: verify-changed-files
        run: |
          if [ -n "$(git status --porcelain)" ]; then
            echo "changed=true" >> $GITHUB_OUTPUT
          else
            echo "changed=false" >> $GITHUB_OUTPUT
          fi

      - name: Create Pull Request
        if: steps.verify-changed-files.outputs.changed == 'true'
        uses: peter-evans/create-pull-request@v6
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          commit-message: 'chore: update dependencies'
          title: 'chore: update dependencies'
          body: |
            This PR updates Go dependencies to their latest versions.
            
            Changes made:
            - Updated Go modules to latest versions
            - Ran `go mod tidy` to clean up dependencies
            
            Please review the changes and ensure all tests pass.
          branch: update-dependencies
          delete-branch: true