Feat(github): git submodule update workflow

.github/dependabot.yml

@@ -6,9 +6,3 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
-
-  # Update Git Submodules daily
-  - package-ecosystem: gitsubmodule
-    schedule:
-      interval: "daily"
-    directory: /

.github/workflows/update-submodules.yml

@@ -0,0 +1,40 @@
+name: Update submodules
+on:
+  schedule: [cron: 0 6 * * 0]
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  issues: write
+  pull-requests: write
+
+jobs:
+  update-submodules:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+        with:
+          submodules: true
+          fetch-depth: 0
+          token: ${{secrets.GITHUB_TOKEN}}
+
+      - name: Config Git User
+        run: |
+          git config --global user.name "${{ github.actor }}"
+          git config --global user.email "${{ github.actor }}@users.noreply.github.com"
+
+      - name: Update submodules
+        run: |
+          if git commit -S -am"Update submodules (automated)
+
+          $(git submodule --quiet foreach \
+            'tag="$(git describe --tags --abbrev=0 origin/HEAD)"
+            if [ "$(git describe --tags)" != "$tag" ]; then
+              git checkout --quiet "$tag"
+              echo "$name" "$tag"
+            fi')"
+          then
+            git show --raw
+            git push
+          fi