Update dev tools #535

	---
	name: Update rebar.lock

	"on":
	push:
	branches:
	- main
	pull_request:
	branches:
	- "*"
	workflow_dispatch: {}
	merge_group:

	concurrency:
	group: ${{github.workflow}}-${{github.ref}}
	cancel-in-progress: true

	jobs:
	branch:
	outputs:
	head_ref: ${{steps.branch.outputs.head_ref}}

	runs-on: ubuntu-24.04

	steps:
	- id: branch
	run: \|
	head_ref=${GITHUB_HEAD_REF}
	echo "head_ref is ${head_ref}"
	echo "head_ref=${head_ref}" > "${GITHUB_OUTPUT}"

	update:
	name: Update rebar.lock

	needs: [branch]

	if: endsWith(needs.branch.outputs.head_ref, 'rebar.config-deps')

	runs-on: ubuntu-24.04

	steps:
	- uses: actions/create-github-app-token@c1a285145b9d317df6ced56c09f525b5c2b6f755 # v1.11.1
	id: app-token
	with:
	app-id: ${{vars.ARIZONA_BOT_APP_ID}}
	private-key: ${{secrets.ARIZONA_BOT_PRIVATE_KEY}}

	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	token: ${{steps.app-token.outputs.token}}
	ref: ${{needs.branch.outputs.head_ref}}

	- uses: erlef/setup-beam@5304e04ea2b355f03681464e683d92e3b2f18451 # v1.18.2
	with:
	version-type: strict
	version-file: .tool-versions

	- run: \|
	rebar3 upgrade --all
	if ! git diff --exit-code >/dev/null; then
	# there's stuff to push
	git config user.name "arizona[bot]"
	git config user.email "[email protected]"
	git add rebar.lock
	git commit -m "[automation] update \`rebar.lock\` after Renovate"
	git push
	fi
	env:
	GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

Provide feedback