name: Dependency Updates

on:
  schedule:
    - cron: '0 2 * * 1'  # Every Monday at 2 AM UTC
  workflow_dispatch:

jobs:
  update-dependencies:
    runs-on: [self-hosted, linux, docker]
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
          token: ${{ secrets.GITEA_TOKEN }}

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'
          cache: 'npm'
          cache-dependency-path: frontend/package-lock.json

      - name: Update Frontend Dependencies
        run: |
          cd frontend
          npm update
          npm audit fix || true

      - name: Setup Go
        uses: actions/setup-go@v5
        with:
          go-version: '1.22'
          cache: true

      - name: Update Go Dependencies
        run: |
          cd backend/playout && go get -u ./... && go mod tidy
          cd ../chat && go get -u ./... && go mod tidy

      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v5
        with:
          token: ${{ secrets.GITEA_TOKEN }}
          commit-message: 'chore: update dependencies'
          title: 'chore: weekly dependency updates'
          body: |
            Automated weekly dependency updates.
            
            This PR updates:
            - Frontend npm dependencies
            - Go module dependencies
            
            Please review the changes and ensure tests pass before merging.
          branch: dependency-updates
          delete-branch: true
          labels: dependencies, automated