Skip to content

Run dependency updates daily and reuse the open update PR#605

Draft
anth-volk wants to merge 1 commit into
mainfrom
automation/daily-dependency-updates
Draft

Run dependency updates daily and reuse the open update PR#605
anth-volk wants to merge 1 commit into
mainfrom
automation/daily-dependency-updates

Conversation

@anth-volk

Copy link
Copy Markdown
Contributor

Fixes #604

Changes to the Update dependencies workflow

  • Daily schedule: cron changes from every 15 minutes to daily at 06:00 UTC.
  • Relock as part of the run: unchanged mechanically (make update runs uv lock --upgrade in every lib and project), now labeled explicitly as the relock step.
  • Reuse the open PR: while an update-dependencies PR is open, the workflow checks out its branch, merges origin/main into it (lock conflicts resolve in main's favor since the relock regenerates them), and pushes the day's relock as a new commit — no force push, no new PR. A new PR is only created when none is open. Force push remains only for branches no open PR owns, or as a fallback when the merge with main cannot be resolved (which refreshes the same open PR rather than opening another).

Tests

Workflow YAML validated with a parser; behavior is exercised by the scheduled runs (also manually triggerable via workflow_dispatch).

🤖 Generated with Claude Code

The update workflow ran every 15 minutes and force-pushed the
update-dependencies branch, rewriting the open PR's history each run.
Now it runs daily, relocks every package via make update (uv lock
--upgrade), and while an update PR is open it merges main into the
branch and appends a new commit instead of force-pushing or opening a
new PR. Force push remains only for branches no open PR owns, or as a
fallback when the merge with main cannot be resolved.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Dependency update workflow: run daily and append to the open PR instead of force-pushing

1 participant