name: Dependency Updates

on:
  schedule:
    - cron: "0 2 * * 1" # Every Monday at 2 AM UTC
  workflow_dispatch:

jobs:
  update-dependencies:
    runs-on: [ubuntu-latest]
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
          token: ${{ secrets.CI_REGISTRY_TOKEN }}

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: "20"
          cache: "npm"
          cache-dependency-path: frontend/package-lock.json

      - name: Update Frontend Dependencies
        run: |
          cd frontend
          npm update
          npm audit fix || true

      - name: Setup Go
        uses: actions/setup-go@v5
        with:
          go-version: "1.22"
          cache: true

      - name: Update Go Dependencies
        run: |
          cd backend/playout && go get -u ./... && go mod tidy
          cd ../chat && go get -u ./... && go mod tidy

      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v5
        with:
          token: ${{ secrets.CI_REGISTRY_TOKEN }}
          commit-message: "chore: update dependencies"
          title: "chore: weekly dependency updates"
          body: |
            Automated weekly dependency updates.

            This PR updates:
            - Frontend npm dependencies
            - Go module dependencies

            Please review the changes and ensure tests pass before merging.
          branch: dependency-updates
          delete-branch: true
          labels: dependencies, automated