Dependency Updates #5

	name: Dependency Updates

	on:
	schedule:
	# Every Monday at 10:00 UTC
	- cron: '0 10 * * 1'
	workflow_dispatch:

	env:
	CARGO_TERM_COLOR: always

	jobs:
	update-dependencies:
	name: Update Dependencies
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v4
	with:
	token: ${{ secrets.GITHUB_TOKEN }}

	- name: Install Rust
	uses: dtolnay/rust-toolchain@stable

	- name: Install cargo-edit
	run: cargo install cargo-edit --locked

	- name: Install cargo-audit
	run: cargo install cargo-audit --locked

	- name: Update dependencies
	run: \|
	cargo update
	cargo upgrade --incompatible

	- name: Run tests
	run: cargo test

	- name: Run audit
	run: cargo audit

	- name: Check for changes
	id: changes
	run: \|
	if git diff --quiet; then
	echo "has_changes=false" >> $GITHUB_OUTPUT
	else
	echo "has_changes=true" >> $GITHUB_OUTPUT
	fi

	- name: Create Pull Request
	if: steps.changes.outputs.has_changes == 'true'
	uses: peter-evans/create-pull-request@v5
	with:
	token: ${{ secrets.GITHUB_TOKEN }}
	commit-message: 'chore: update dependencies'
	title: 'chore: update dependencies'
	body: \|
	## Dependency Updates

	Automated weekly bump of Rust dependencies.

	- `cargo update` ran (Cargo.lock refreshed)
	- `cargo upgrade --incompatible` ran (Cargo.toml may have changed)

	### Verification
	- tests pass
	- `cargo audit` clean

	This PR was created automatically by the dependency update workflow.
	branch: chore/update-dependencies
	delete-branch: true

Navigation Menu