From 65ee7c834a5e3055b670dcd936d255ab24a80d51 Mon Sep 17 00:00:00 2001
From: Max Isbey <224885523+maxisbey@users.noreply.github.com>
Date: Thu, 15 Jan 2026 17:58:17 +0100
Subject: [PATCH 1/3] ci: add weekly lockfile update workflow

Adds a scheduled GitHub Action that runs every Monday at 8:00 UTC to
update uv.lock with the latest dependency versions using 'uv lock --upgrade'.

The workflow creates a PR with the changes, allowing CI to run before
merging. This ensures we periodically test against the latest versions
of our dependencies without the instability of testing 'highest' on
every PR.

Claude-Generated-By: Claude Code (cli/claude-opus-4-5=100%)
Claude-Steers: 3
Claude-Permission-Prompts: 4
Claude-Escapes: 0
---
 .github/workflows/weekly-lockfile-update.yml | 40 ++++++++++++++++++++
 1 file changed, 40 insertions(+)
 create mode 100644 .github/workflows/weekly-lockfile-update.yml

diff --git a/.github/workflows/weekly-lockfile-update.yml b/.github/workflows/weekly-lockfile-update.yml
new file mode 100644
index 000000000..e8406fa3a
--- /dev/null
+++ b/.github/workflows/weekly-lockfile-update.yml
@@ -0,0 +1,40 @@
+name: Weekly Lockfile Update
+
+on:
+  workflow_dispatch:
+  schedule:
+    # Every Monday at 8:00 UTC
+    - cron: "0 8 * * 1"
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  update-lockfile:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+
+      - uses: astral-sh/setup-uv@v7
+        with:
+          version: 0.9.5
+
+      - name: Update lockfile
+        run: |
+          echo '## Updated Dependencies' > pr_body.md
+          echo '' >> pr_body.md
+          echo '```' >> pr_body.md
+          uv lock --upgrade 2>&1 | tee -a pr_body.md
+          echo '```' >> pr_body.md
+
+      - name: Create pull request
+        uses: peter-evans/create-pull-request@v7
+        with:
+          commit-message: "chore: update uv.lock with latest dependencies"
+          title: "chore: weekly dependency update"
+          body-path: pr_body.md
+          branch: weekly-lockfile-update
+          delete-branch: true
+          add-paths: uv.lock
+          labels: dependencies

From e3d7c5ebe0c007c42ac005bf8f14d22658144993 Mon Sep 17 00:00:00 2001
From: Max Isbey <224885523+maxisbey@users.noreply.github.com>
Date: Fri, 16 Jan 2026 09:28:45 +0100
Subject: [PATCH 2/3] chore: run weekly lockfile update on Thursday instead of
 Monday

---
 .github/workflows/weekly-lockfile-update.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/weekly-lockfile-update.yml b/.github/workflows/weekly-lockfile-update.yml
index e8406fa3a..578120ff5 100644
--- a/.github/workflows/weekly-lockfile-update.yml
+++ b/.github/workflows/weekly-lockfile-update.yml
@@ -3,8 +3,8 @@ name: Weekly Lockfile Update
 on:
   workflow_dispatch:
   schedule:
-    # Every Monday at 8:00 UTC
-    - cron: "0 8 * * 1"
+    # Every Thursday at 8:00 UTC
+    - cron: "0 8 * * 4"
 
 permissions:
   contents: write

From 3e7eca8e5d999e202f9fad7c0b306ef18e0f2008 Mon Sep 17 00:00:00 2001
From: Max Isbey <224885523+maxisbey@users.noreply.github.com>
Date: Fri, 16 Jan 2026 09:37:31 +0100
Subject: [PATCH 3/3] chore: pin create-pull-request action to commit hash

---
 .github/workflows/weekly-lockfile-update.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/weekly-lockfile-update.yml b/.github/workflows/weekly-lockfile-update.yml
index 578120ff5..d4fe349a7 100644
--- a/.github/workflows/weekly-lockfile-update.yml
+++ b/.github/workflows/weekly-lockfile-update.yml
@@ -29,7 +29,7 @@ jobs:
           echo '```' >> pr_body.md
 
       - name: Create pull request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@22a9089034f40e5a961c8808d113e2c98fb63676 # v7
         with:
           commit-message: "chore: update uv.lock with latest dependencies"
           title: "chore: weekly dependency update"