Dependencies Updates #105

	---
	# SPDX-License-Identifier: Apache-2.0
	# SPDX-FileCopyrightText: 2025 The Linux Foundation

	# Updates Python dependencies and raises a pull request with changes
	name: 'Dependencies Updates'

	# yamllint disable-line rule:truthy
	on:
	workflow_dispatch:
	schedule:
	- cron: '0 8 1 * *'
	push:
	branches:
	- 'main'
	- 'master'
	paths:
	- '**'
	- '!.github/**'
	- '!.*'
	- '!pdm.lock'
	- '!tox.ini'

	env:
	python-version: 3.11

	permissions: {}

	jobs:
	python-dependencies:
	name: 'Dependencies Updates'
	runs-on: 'ubuntu-latest'
	permissions:
	# IMPORTANT: mandatory to raise the PR
	id-token: write
	pull-requests: write
	repository-projects: write
	contents: write
	timeout-minutes: 10
	steps:
	# Harden the runner used by this workflow
	# yamllint disable-line rule:line-length
	- uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
	with:
	egress-policy: audit
	# yamllint disable-line rule:line-length
	- uses: lfreleng-actions/python-dependencies-update-action@27999c18f42d8d001cd04344eab6baa3bea8a68c # v0.1.2
	with:
	token: ${{ secrets.GITHUB_TOKEN }}

Provide feedback