feat(ci): Add workflow to create PRs automatically if new packages are released.

Author: spbsoluble

.github/workflows/upgrade-packages.yml

@@ -0,0 +1,84 @@
+name: Upgrade NuGet Packages
+
+on:
+  schedule:
+    # Run every Monday at 3:00 AM UTC
+    - cron: '0 3 * * 1'
+  workflow_dispatch:
+    # Allow manual triggering
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  upgrade:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5.6.0
+        with:
+          python-version: '3.12'
+
+      - name: Install Python dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e .
+
+      - name: Run upgrade
+        run: python scripts/sync_nuget.py upgrade packages.yml | tee /tmp/upgrade-output.txt
+        env:
+          AZ_DEVOPS_PAT: ${{ secrets.AZ_DEVOPS_PAT }}
+
+      - name: Build PR body
+        id: pr-body
+        run: |
+          python - <<'EOF'
+          import os
+
+          with open("/tmp/upgrade-output.txt") as f:
+              lines = f.readlines()
+
+          # Collect only packages that gained new versions
+          entries = []
+          current_pkg = None
+          for line in lines:
+              line = line.rstrip()
+              if line.startswith("Checking "):
+                  current_pkg = line.removeprefix("Checking ").rstrip(".")
+              elif "New versions:" in line and current_pkg:
+                  versions = line.split("New versions:", 1)[1].strip()
+                  entries.append(f"| {current_pkg} | {versions} |")
+
+          body = "This PR was automatically created by the weekly upgrade workflow.\n\n"
+          if entries:
+              body += "## New versions registered\n\n"
+              body += "| Package | Versions |\n"
+              body += "| --- | --- |\n"
+              body += "\n".join(entries)
+              body += "\n\n"
+          body += (
+              "After merging, the daily "
+              "[Sync NuGet Packages](../actions/workflows/sync-nuget.yml) "
+              "workflow will push the new versions to the GitHub Package Registry, "
+              "or you can trigger it manually."
+          )
+
+          with open(os.environ["GITHUB_OUTPUT"], "a") as f:
+              f.write(f"body<<EOF\n{body}\nEOF\n")
+          EOF
+
+      - name: Create Pull Request
+        uses: peter-evans/create-pull-request@v7
+        with:
+          token: ${{ secrets.GH_NUGET_TOKEN }}
+          branch: chore/upgrade-nuget-packages
+          commit-message: "chore: register new NuGet package versions"
+          title: "chore: register new NuGet package versions"
+          body: ${{ steps.pr-body.outputs.body }}
+          labels: automated
+          delete-branch: true

README.md

@@ -10,10 +10,14 @@ Some package availability changes from time to time. Please view the `CHANGELOG.
 
 ### Via GitHub Actions
 
+New versions of existing packages are registered automatically every Monday by the [Upgrade NuGet Packages](https://github.com/Keyfactor/public-nuget-packages/actions/workflows/upgrade-packages.yml) workflow, which opens a PR with any changes. Once merged, the daily [Sync NuGet Packages](https://github.com/Keyfactor/public-nuget-packages/actions/workflows/sync-nuget.yml) workflow pushes the new versions to the GitHub Package Registry.
+
+To add a brand new package or manually trigger a sync:
+
 1. Add the package and version(s) to [`packages.yml`](./packages.yml).
 2. Trigger the [Sync NuGet Packages](https://github.com/Keyfactor/public-nuget-packages/actions/workflows/sync-nuget.yml) workflow.
 
-Once complete, the package will be available in the Keyfactor Public GitHub Package Registry (GPR). The workflow runs automatically on a daily schedule and skips any versions already published.
+Once complete, the package will be available in the Keyfactor Public GitHub Package Registry (GPR). The sync workflow runs automatically on a daily schedule and skips any versions already published.
 
 > [!IMPORTANT]
 > The package and version must already exist in the Azure DevOps feed before adding it to `packages.yml`: