Pro 4734 check outdated deps

[ETLaurent]

[linear]

PRO-4734 Update project actions to look for stale dependencies to make it easier to stay ahead of the monthly maintenance work.

For projects and packages we routinely maintain, we should add a scheduled Github action bi-weekly to run npm outdated which will give us a report of the dependencies that are out of date. Using this output we can gauge the level of effort for updating dependencies. ( Could even be able update minor versions automatically, if we think that is safe )

Make sure it calls attention to major versions being out of date.

Here is an example of a scheduled task from Holon which was used to keep the dev branch in sync with main. The relevant part is the on.schedule:

name: Sync

on:
  schedule:
    # Runs Mon-Fri at 0:00 UTC ( 00:00 EST )
    - cron: "0 0 * * 1-5"

jobs:
  sync-branch:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkoutmaster

      - name: Merge main to dev
        uses: devmasx/merge-branchmaster
        with:
          type: now
          from_branch: main
          target_branch: dev
          github_token: ${{ github.token }}
          message: '[Automated] Merged main into dev'

This ticket is to create the action not to add to every project.

Acceptance Criteria:

Installed and working in the apostrophe repo

This sends a report via Slack webhook in our #product-development Slack channel

[ETLaurent]

way of getting the correct exit status

[boutell]

npm outdated > output should do this by itself 🤔 Unless your goal was just to always add a newline. Not wrong though

[ETLaurent]

I wasn't able to keep the exit status when writing the output into the output file, so I'm running the same command again... not pretty but it works and makes the step fail as expected.
i.e: echo "$(npm outdated)" > output always exit 0

[boutell]

Once every two weeks would be more appropriate. We will never be 100% up to date with the same major version of everything, often up to date modules require older but maintained versions of other modules, etc. If we generate this report daily we will become blind to it (:

[ETLaurent]

Would every week do?
I found a syntax to run it every 2 week: 0 8 * * MON test $((10#$(date +\%W)\%2)) -eq 1, but it's not compatible with GA

[boutell]

npm outdated > output should do this by itself 🤔 Unless your goal was just to always add a newline. Not wrong though

[boutell]

Once a week will have to do. 👍