Enhance upgrade workflow: age check, dedup, issue tracking

Author: rahuldevikar

.github/workflows/upgrade.yaml

@@ -41,8 +41,35 @@ jobs:
             echo "changed=false" >> "$GITHUB_OUTPUT"
             echo "### All embedded dependencies are up to date" >> "$GITHUB_STEP_SUMMARY"
           fi
-      - name: Create Pull Request
+      - name: Check PyPI release age
         if: steps.upgrade.outputs.changed == 'true'
+        id: age-check
+        run: |
+          cutoff=$(( $(date +%s) - 7 * 24 * 3600 ))
+          too_new=false
+          for whl in $(git diff --name-only -- 'src/virtualenv/seed/wheels/embed/*.whl'); do
+            pkg=$(basename "$whl" | cut -d- -f1)
+            version=$(basename "$whl" | cut -d- -f2)
+            upload_time=$(curl -sf "https://pypi.org/pypi/${pkg}/${version}/json" | jq -r '.urls[0].upload_time_iso_8601 // empty')
+            if [ -z "$upload_time" ]; then
+              echo "::warning::Could not fetch release date for ${pkg}==${version}"
+              continue
+            fi
+            release_epoch=$(date -d "$upload_time" +%s)
+            if [ "$release_epoch" -gt "$cutoff" ]; then
+              echo "::notice::${pkg}==${version} released less than 7 days ago (${upload_time})"
+              too_new=true
+            fi
+          done
+          if [ "$too_new" = "true" ]; then
+            echo "skip=true" >> "$GITHUB_OUTPUT"
+            echo "### Skipped — some packages released less than 7 days ago" >> "$GITHUB_STEP_SUMMARY"
+          else
+            echo "skip=false" >> "$GITHUB_OUTPUT"
+          fi
+      - name: Create Pull Request
+        if: steps.upgrade.outputs.changed == 'true' && steps.age-check.outputs.skip != 'true'
+        id: cpr
         uses: peter-evans/create-pull-request@v8
         with:
           commit-message: "Upgrade embedded dependencies"
@@ -55,3 +82,22 @@ jobs:
             This PR was created automatically by the [upgrade workflow](https://github.com/${{ github.repository }}/actions/workflows/upgrade.yaml).
           labels: |
             dependencies
+      - name: Rename changelog with PR number
+        if: steps.cpr.outputs.pull-request-number
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          pr_number="${{ steps.cpr.outputs.pull-request-number }}"
+          target="docs/changelog/${pr_number}.bugfix.rst"
+          # switch to the PR branch
+          git fetch origin auto/upgrade-embedded-deps
+          git checkout auto/upgrade-embedded-deps
+          if [ -f "docs/changelog/u.bugfix.rst" ]; then
+            mv "docs/changelog/u.bugfix.rst" "$target"
+          elif [ ! -f "$target" ]; then
+            echo "No changelog file found to rename"
+            exit 0
+          fi
+          git add docs/changelog/
+          git commit -m "Rename changelog to ${pr_number}.bugfix.rst"
+          git push