dependencies.yml

name: Check deps

on:
  push:

env:
  DEBIAN_FRONTEND: noninteractive

jobs:
  quality:
    name: Checking dependency graph
    runs-on: 'ubuntu-latest'

    permissions:
      # Give the default GITHUB_TOKEN write permission to commit and push the
      # added or changed files to the repository.
      contents: write

    steps:
      - uses: actions/checkout@v4
        with:
          repository: ${{ github.event.pull_request.head.repo.full_name }}
          ref: ${{ github.event.pull_request.head.ref }}
          token: ${{ secrets.GHA_PAT }}

      - name: Set up Python
        uses: ./.github/actions/python-cache-requirements
        with:
          requirements: dev-requirements.txt

      - name: Install dependencies
        run: |
          pip3 install -c dev-requirements.txt pip-tools

      - name: Check dependency graph
        run: |
          pip-compile -q --strip-extras
          pip-compile -q --strip-extras dev-requirements.in
          pip-compile -q --strip-extras docs/requirements.in

      - name: Verify dependency graph is ok
        uses: tj-actions/verify-changed-files@v20
        id: verify-changed-files
        with:
          files: |
            requirements.txt
            dev-requirements.txt
            docs/requirements.txt

      - name: Validating graph
        if: steps.verify-changed-files.outputs.files_changed == 'true'
        run: |
          echo "Dependency file(s) changed: ${{ steps.verify-changed-files.outputs.changed_files }}"
          git diff

      - name: "Commiting dependencies files"
        uses: EndBug/add-and-commit@v9