Update Dependencies #69
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Public npm dependency update workflow | |
| # ===================================== | |
| name: Update Dependencies | |
| on: | |
| schedule: | |
| - cron: '0 0 * * 0' # Run weekly on Sundays | |
| workflow_dispatch: # Allow manual triggering | |
| permissions: | |
| contents: read | |
| jobs: | |
| update-deps: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: write | |
| pull-requests: write | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout | |
| uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| - name: Resolve authentication token | |
| id: auth | |
| uses: ./.github/actions/auth-token | |
| with: | |
| app-id: ${{ vars.GH_APP_ID }} | |
| private-key: ${{ secrets.GH_APP_PRIVATE_KEY }} | |
| - name: Prepare pre-requisites | |
| uses: ./.github/actions/prepare | |
| - name: Configure npm authentication for npm registry | |
| env: | |
| NPM_TOKEN: ${{ secrets.NPM_TOKEN }} | |
| run: | | |
| echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc | |
| - name: Install dependencies | |
| run: pnpm install | |
| - name: Check for outdated dependencies | |
| id: outdated | |
| run: | | |
| echo "OUTDATED_DEPS=$(pnpm outdated --format json)" >> "$GITHUB_ENV" | |
| continue-on-error: true | |
| - name: Create PR for dependency updates | |
| if: success() | |
| uses: peter-evans/create-pull-request@4e1beaa7521e8b457b572c090b25bd3db56bf1c5 # v5.0.3 | |
| with: | |
| token: ${{ steps.auth.outputs.token }} | |
| commit-message: 'chore(deps): update dependencies' | |
| title: 'chore(deps): update dependencies' | |
| body: | | |
| This PR updates dependencies to their latest versions. | |
| <details> | |
| <summary>Outdated dependencies</summary> | |
| ``` | |
| ${{ env.OUTDATED_DEPS }} | |
| ``` | |
| </details> | |
| Auto-generated by the Update Dependencies workflow. | |
| branch: update-dependencies | |
| base: main | |
| labels: dependencies |