Mozilla cacert update via Github Action (#34703)

* Github action to update the mozilla cacert bundle

* Only run in core repo

* No running on push. Alloow manual trigger

* Update action to create a PR

Author: wilsonge

.github/workflows/cacert-update.yml

@@ -0,0 +1,36 @@
+name: Cron to update Mozilla CaCert files in the Joomla Core
+
+on:
+  workflow_dispatch:
+  schedule:
+    # * is a special character in YAML so you have to quote this string
+    # Runs on the first day of every month at 03:00
+    - cron:  '0 3 1 * *'
+
+jobs:
+  build:
+    if: (github.event_name == 'schedule' && github.repository == 'joomla/joomla-cms') || (github.event_name != 'schedule')
+
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v2
+
+      - name: Download the latest cacert file
+        uses: wei/wget@v1
+        with:
+          args: -O libraries/src/Http/Transport/cacert.pem https://curl.se/ca/cacert.pem
+
+      - name: Copy the cacert file to the FOF repo
+        run: cp "libraries/src/Http/Transport/cacert.pem" "libraries/fof/download/adapter/cacert.pem"
+
+      - name: Create Pull Request
+        uses: peter-evans/create-pull-request@v3
+        id: cpr
+        with:
+          branch: mozilla_ca_update
+
+      - name: Log resulting Pull Request
+        run: |
+          echo "Pull Request Number - ${{ steps.cpr.outputs.pull-request-number }}"
+          echo "Pull Request URL - ${{ steps.cpr.outputs.pull-request-url }}"