update_python_requirements.yml

name: Bump requirements.txt
on:
  pull_request:
    paths:
      - 'packages/python/sshnpd/pyproject.toml'
  workflow_dispatch:

# Declare default permissions as read only.
permissions: read-all

jobs:
  bump_requirements:
    runs-on: ubuntu-latest

    permissions:
      pull-requests: write

    steps:
    - name: Checkout this repo
      if: ${{ github.actor == 'dependabot[bot]' }}
      uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
      with:
        fetch-depth: 0
        ref: ${{ github.event.pull_request.head.ref }}
        token: ${{ secrets.MY_GITHUB_TOKEN }}

    - name: Set up Python
      if: ${{ github.actor == 'dependabot[bot]' }}
      uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
      with:
          python-version: '3.11'

    - name: Install Poetry
      if: ${{ github.actor == 'dependabot[bot]' }}
      uses: abatilo/actions-poetry@7b6d33e44b4f08d7021a1dee3c044e9c253d6439 # v3.0.0
      with:
        poetry-version: '1.8.3'

    - name: Bump sshnpd Python dependencies
      working-directory: packages/python/sshnpd
      if: ${{ github.actor == 'dependabot[bot]' }}
      run: |
        poetry update
        poetry export --format requirements.txt --output requirements.txt
        git config --global user.name 'dependabot[bot]'
        git config --global user.email 'dependabot[bot]@users.noreply.github.com'
        git add requirements.txt
        if [ -z "$(git status --porcelain)" ]; then 
          echo 'No changes to commit on this run'
          exit 0
        else
          poetry version patch
          git add pyproject.toml
          git commit -m "build(deps): Bump sshnpd requirements.txt and poetry version"
          git push
        fi