Automatic yarn dependency upgrades
#4
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Automatic `yarn` dependency upgrades | |
| on: | |
| schedule: | |
| - cron: "0 0 * * *" | |
| workflow_dispatch: | |
| permissions: | |
| contents: write | |
| pull-requests: write | |
| jobs: | |
| yarn-update-pins: | |
| name: Update `yarn.lock` pins | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Set up Node | |
| uses: actions/setup-node@v4 | |
| env: | |
| FORCE_COLOR: 0 | |
| with: | |
| node-version: "20" | |
| cache: "yarn" | |
| cache-dependency-path: ./webapp/yarn.lock | |
| - name: Sync latest compatible dependencies and commit | |
| working-directory: ./webapp | |
| run: yarn upgrade | |
| - name: Create PR with changes | |
| uses: peter-evans/create-pull-request@v7 | |
| with: | |
| base: main | |
| add-paths: ./webapp/yarn.lock | |
| sign-commits: true | |
| branch: ci/update-yarn-lock-main-deps | |
| delete-branch: true | |
| commit-message: "ci: update yarn lock file" | |
| title: "Update `yarn.lock` with latest dependencies" | |
| body: "This PR updates the `yarn.lock` file with the latest compatible dependencies. The chagnes to the lockfile must be reviewed; to run the tests, mark the PR as ready-for-review." | |
| labels: dependency_updates,javascript | |
| draft: always-true |