cargo-upgrade.yml

name: cargo-upgrade
on:
  workflow_dispatch:
  schedule:
    - cron: "0 0 * * 0" # At 00:00 on Sunday
env:
  CARGO_TERM_COLOR: always
  ACTION_MSRV_TOOLCHAIN: 1.66.1
  BODY_FILE: .cargo-upgrades
jobs:
  upgrade:
    if: github.ref == 'refs/heads/main' && github.repository == 'containers/conmon-rs'
    permissions:
      contents: write
      pull-requests: write
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
      - name: Setup Cache
        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            target
          key: cargo-upgrade-${{ hashFiles('**/Cargo.lock') }}
      - name: Select latest toolchain
        uses: dtolnay/rust-toolchain@315e265cd78dad1e1dcf3a5074f6d6c47029d5aa
        with:
          toolchain: stable
      - name: Install cargo-edit
        run: cargo install cargo-edit
      - name: Upgrade direct dependencies
        shell: bash
        run: |
          set -euox pipefail
          mv .cargo .tmp
          printf "Update cargo dependencies:\n\n\`\`\`\n" > "$BODY_FILE"
          cargo upgrade --rust-version=$ACTION_MSRV_TOOLCHAIN >> "$BODY_FILE"
          echo "\`\`\`" >> "$BODY_FILE"
          mv .tmp .cargo
          cargo vendor .cargo-vendor
      - name: Check workspace
        id: create_pr
        run: |
          if [[ $(git diff --stat) != '' ]]; then
            echo "create_pr=true" >> "$GITHUB_OUTPUT"
          fi
      - name: Create PR if required
        uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f # v7.0.5
        if: ${{ steps.create_pr.outputs.create_pr == 'true' }}
        with:
          commit-message: Update cargo dependencies
          title: "Update cargo dependencies"
          body-path: ${{ env['BODY_FILE'] }}
          labels: kind/dependency-change, release-note-none, ok-to-test
          branch: cargo-deps
          delete-branch: true
          signoff: true