uv-lock-check.yml

# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
name: Check uv.lock Freshness

on:
  pull_request:
    paths:
      - "pyproject.toml"
      - "uv.lock"

permissions:
  contents: write
  pull-requests: write

jobs:
  update-uv-lock:
    if: github.actor == 'renovate[bot]' || startsWith(github.head_ref, 'renovate/')
    runs-on: ubuntu-latest

    steps:
      - name: Checkout PR branch
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          ref: ${{ github.head_ref }}

      - name: Install uv
        uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098 # v7.3.1

      - name: Ensure lock is up to date
        run: uv lock --check