zigbee2mqtt/.github/workflows/update-dependency.yml

on:
    repository_dispatch:
        types: update_dep

name: Update dependency

permissions: {}
jobs:
    update-dependency:
        permissions:
            contents: write
            pull-requests: write

        runs-on: ubuntu-latest
        steps:
            - uses: actions/checkout@v6
              with:
                  ref: dev
                  token: ${{ secrets.GH_TOKEN }}
            - uses: pnpm/action-setup@v6
            - uses: actions/setup-node@v6
              with:
                  node-version: 24
                  cache: pnpm
            - run: |
                  pnpm install ${{ github.event.client_payload.package }}@${{ github.event.client_payload.version }} --save-exact
                  pnpm install --no-frozen-lockfile
            - uses: peter-evans/create-pull-request@v8
              id: cpr
              with:
                  commit-message: 'fix(ignore): update ${{ github.event.client_payload.package }} to ${{ github.event.client_payload.version }}'
                  branch: 'deps/${{ github.event.client_payload.package }}'
                  title: 'fix(ignore): update ${{ github.event.client_payload.package }} to ${{ github.event.client_payload.version }}'
                  token: ${{ secrets.GH_TOKEN }}
            - run: sleep 5 # Otherwise pull request may not exist yet causing automerge to fail
            - run: gh pr merge --squash --auto "${{ steps.cpr.outputs.pull-request-number }}"
              if: steps.cpr.outputs.pull-request-operation == 'created'
              env:
                  GH_TOKEN: ${{ secrets.GH_TOKEN }}