feat: update make exection

- run it on all pull requests
- use pre-commit to push changes to forks

Author: nijel

.github/workflows/submodules-update.yml .github/workflows/make.yml.github/workflows/submodules-update.yml renamed to .github/workflows/make.yml

@@ -2,23 +2,21 @@
 #
 # SPDX-License-Identifier: MIT
 
-name: submodule update
+name: update generated files
 
 on:
   push:
     branches:
     - renovate/**
     - main
-    paths:
-    - .github/workflows/submodules-update.yml
-    - modules/**
+  pull_request:
+
+permissions:
+  contents: write
 
 jobs:
   submodule-update:
     runs-on: ubuntu-24.04
-    permissions:
-      contents: write
-      pull-requests: write
 
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
@@ -38,17 +36,25 @@ jobs:
     - name: Install dependencies
       run: uv pip install --system -e .[dev]
     - run: make
-    - name: Update renovate branch
-      if: github.ref != 'refs/heads/main'
+    - run: git diff
+
+    - uses: pre-commit-ci/lite-action@5d6cc0eb514c891a40562a58a8e71576c5c7fb43 # v1.1.0
+      if: github.event_name == 'pull_request' && github.actor != 'renovate[bot]'
+      with:
+        msg: 'chore: update generated files'
+
+    - name: Update current branch
+      if: github.event_name == 'push' && github.ref_name != 'main'
       uses: stefanzweifel/git-auto-commit-action@b863ae1933cb653a53c021fe36dbb774e1fb9403 # v5.2.0
       with:
         commit_message: 'chore: Updates from submodules'
+
     - name: Create Pull Request
-      if: github.ref == 'refs/heads/main'
+      if: github.event_name == 'push' && github.ref_name == 'main'
       uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
       with:
         branch: create-pull-request/submodule-update
-        title: 'chore: Updates from submodules'
-        commit-message: 'chore: Updates from submodules'
-permissions:
-  contents: read
+        title: 'chore: update generated files'
+        commit-message: 'chore: update generated files'
+
+        token: ${{ secrets.WEBLATE_CI_TOKEN }}