nordisk/dwarves

pipelines/deps-update.runa.ron

// deps-update.runa.ron — the weekly dependency update (lane OSSF-NEXT, 2026-10-30): what a
// Renovate or Dependabot bot does, done by the forge (git.gunnar.rs runs no bot and no
// Actions; the repositories' renovate.json says the same policy for any tool that reads it).
//
// 1. `cargo ci-verbs deps-update` runs `cargo update` in every workspace lock of the checkout
//    (semver-compatible moves only), commits the moved locks with no trailer, and writes
//    propose.json (the commit and a NEW branch deps/update-<date>-<sha8>).
// 2. The repository's own quick CI runs on that very tree.
// The forge pushes the proposal only when the whole run is green, as a new branch, never
// forced and never merged: a person merges it. Monday 01:30 UTC.
Pipeline(
    name: "deps-update",
    triggers: [
        Cron("30 1 * * 1"),
        Manual,
    ],
    stages: [
        Stage(
            name: "update",
            steps: [
                Xtask(cmd: "deps-update", alias: "ci-verbs", repo: "dwarves", args: ["--author", "Rickard Lundin <rickard@ignalina.dk>"]),
            ],
        ),
        Stage(
            name: "ci",
            steps: [
                Xtask(cmd: "ci", args: ["--quick"]),
            ],
        ),
    ],
)