chore: enhance auto-dependency updater workflow with improved structure and checks

Author: deleonio

.github/workflows/auto-dependency-updater.yml

@@ -1,44 +1,87 @@
 name: Auto dependency updater
 
+env:
+  issue: 6350
+
 on:
   schedule:
-    - cron: "0 2 * * *"
+    - cron: '0 2 * * 0'
   workflow_dispatch:
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   update:
     runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - base: main
+            version: v3
+          - base: release/2
+            version: v2
+    env:
+      version: ${{ matrix.version }}
     steps:
       - uses: actions/checkout@v5
         with:
           fetch-depth: 0
+          ref: ${{ matrix.base }}
           persist-credentials: false
-          ref: "main"
-      - uses: ./.github/actions/pnpm-setup
-      - name: Create new branch
-        run: git checkout -b chore/auto-update-deps
-      - name: Show code
-        run: ls -la
-        working-directory: dev
-      - name: Install tools
-        run: npm i npm-check-updates --no-save --legacy-peer-deps
-        working-directory: dev
+      - uses: actions/setup-node@v5
+        with:
+          # cache: pnpm
+          node-version: 22
+      - uses: pnpm/action-setup@v4
+        id: pnpm-install
+        with:
+          version: 10
+          run_install: false
+      - name: Get pnpm store directory
+        id: pnpm-cache
+        shell: bash
+        run: echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT
+      - uses: actions/cache@v4
+        with:
+          path: ${{ steps.pnpm-cache.outputs.STORE_PATH }}
+          key: ${{ runner.os }}-pnpm-store
+          restore-keys: |
+            ${{ runner.os }}-pnpm-store
+
+      - name: Install
+        run: pnpm i --no-frozen-lockfile
       - name: Update dependencies
-        run: npm run update
-        working-directory: dev
+        run: pnpm run update
       - name: Reinstall dependencies
-        run: pnpm install --no-frozen-lockfile
-        working-directory: dev
-      - name: Commit changed files
+        run: pnpm i --no-frozen-lockfile
+
+      - name: Check for changes
+        id: verify-changed-files
         run: |
-          git config --local user.email "[email protected]"
-          git config --local user.name "GitHub Action"
-          git add **/package.json **/pnpm-lock.yaml
-          git status
-          git commit -m "chore: auto dependency update"
+          if [ -n "$(git status --porcelain)" ]; then
+            echo "changed=true" >> $GITHUB_OUTPUT
+          else
+            echo "changed=false" >> $GITHUB_OUTPUT
+          fi
 
-      - uses: ad-m/github-push-action@master
+      - name: Create Pull Request
+        if: steps.verify-changed-files.outputs.changed == 'true'
+        uses: peter-evans/create-pull-request@v7
         with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-          branch: "chore/auto-update-deps"
-          force: true
+          base: ${{ matrix.base }}
+          branch: ${{ env.issue }}-${{ env.version }}/auto-update-deps
+          commit-message: 'chore: update dependencies and lock file'
+          title: 'chore(${{ env.version }}): update dependencies and lock file'
+          body: 'Automated dependency updates from issue #${{ env.issue }} for ${{ env.version }}.'
+          delete-branch: true
+
+      - name: Quality Checks
+        if: steps.verify-changed-files.outputs.changed == 'true'
+        run: |
+          pnpm build
+          pnpm format
+          pnpm lint
+          pnpm unused