WIP: Create PR on main website when SPEC repo is updated

[jarrodmillman]

See scientific-python/scientific-python.org#408

The purpose of this PR is to autogenerate PRs for https://github.com/scientific-python/scientific-python.org to update the SPEC submodule when changes appear on main. I am trying to follow the instructions found here:

• https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#creating-pull-requests-in-a-remote-repository

It says you need a "a repo scoped Personal Access Token (PAT) ," but I am using a "Fine-grained personal access tokens" with " Read and Write access to pull requests" to "scientific-python/scientific-python.org".

I haven't used peter-evans/create-pull-request before and would love detailed feedback or suggestions on this.

[bsipocz]

I wonder whether dependabot could be used for this, too rather than a new thing? afaik it can handle git submodule updates, too, and we already use it.

[jarrodmillman]

I wonder whether dependabot could be used for this, too rather than a new thing? afaik it can handle git submodule updates, too, and we already use it.

I was considering that as well. If we do that I think we need to use a cron job to check whether this repo has been updated. I thought it made more sense to make a PR whenever we updated this repo instead. But I don't have a strong opinion. If we use dependabot on the "scientific-python/scientific-python.org" repo, I suppose we should do it everyday (see scientific-python/scientific-python.org#448).

Thoughts? @bsipocz @stefanv @pllim @henryiii @tupui

[jarrodmillman]

Closing as we preferred this approach: scientific-python/scientific-python.org#448