GitHub Action
bumpgen
bumpgen
bumps your TypeScript / TSX dependencies and makes code changes for you if anything breaks.
Here's a common scenario:
you: "I should upgrade to the latest version of x, it has banging new features and impressive performance improvements"
you (5 minutes later): nevermind, that broke a bunch of stuff
Then use bumpgen
!
How does it work?
bumpgen
builds your project to understand what broke when a dependency was bumped- Then
bumpgen
uses ts-morph to create an abstract syntax tree from your code, to understand the relationships between statements - It also uses the AST to get type definitions for external methods to understand how to use new package versions
bumpgen
then creates a plan graph DAG to execute things in the correct order to handle propagating changes (ref: arxiv 2309.12499)
Note
bumpgen
only supports typescript and tsx at the moment, but we're working on adding support for other strongly typed languages. Hit the emoji button on our open issues for Java, golang, C# and Python to request support.
To get started, you'll need an OpenAI API key. gpt-4-turbo-preview
from OpenAI is the only supported model at this time, though we plan on supporting more soon.
Then, run bumpgen
:
> export LLM_API_KEY="<openai-api-key>"
> cd ~/my-repository
> npm install -g bumpgen
> bumpgen @tanstack/react-query 5.28.14
where @tanstack/react-query
is the package you want to bump and 5.28.14
is the version you want to bump to.
You can also run bumpgen
without arguments and select which package to upgrade from the menu. Use bumpgen --help
for a complete list of options.
We've created a GitHub action that can be used to run bumpgen. The intended usage is to be triggered on dependabot or renovatebot PRs - if breaking changes are detected, bumpgen will commit to the PR branch.
Note
The action commits changes to the branch it was triggered from. If you would like those commits to trigger other CI workflows, you will need to use a GitHub Personal Access Token.
name: "Bumpgen"
on:
pull_request:
types:
- opened
permissions:
pull-requests: read
contents: write
jobs:
main:
name: Run Bumpgen
runs-on: ubuntu-latest
if: ${{ github.event.pull_request.user.login == 'dependabot[bot]'}} # Use renovate[bot] for renovate PRs
steps:
- uses: actions/checkout@v4
- name: Setup # Checkout and setup your project before running the bumpgen action
uses: ./tooling/github/setup
- name: Bumpgen
uses: xeol-io/[email protected]
with:
path: "./packages/bumpgen-core/" # The location of your project's package.json file
llm_key: ${{ secrets.LLM_API_KEY }}
github_token: ${{ secrets.GITHUB_TOKEN }}
Note
If you'd like to be first in line to try the bumpgen
GitHub App to replace your usage of dependabot + renovatebot, sign up here.
There are some limitations you should know about.
bumpgen
relies on build errors to determine what needs to be fixed. If an issue is caused by a behavioral change,bumpgen
won't detect it.bumpgen
can't handle multiple packages at the same time. It will fail to upgrade packages that require peer dependencies to be updated the same time to work such as@octokit/core
and@octokit/plugin-retry
.bumpgen
is not good with very large frameworks likevue
. These kind of upgrades (and vue 2 -> 3 specifically) can be arduous even for a human.
> bumpgen @tanstack/react-query 5.28.14
β
ββ¬ββββββΌβββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ CLI β
ββ΄ββββββ¬βββ²ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β β
ββ¬ββββββΌβββ΄ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ Core (Codeplan) β
ββ β
ββ βββββββββββββββββββββββββββββββββββββ ββββββββββββββββββββββββββββββββββββ β
ββ β Plan Graph β β Abstract Syntax Tree β β
ββ β β β β β
ββ β β β β β
ββ β βββ β β βββ β β
ββ β ββββ΄ββ β β ββββ΄ββ΄βββ β β
ββ β β β β β β β β
ββ β ββΌβ ββββΌββΌβββ ββΌβ ββΌβ β β
ββ β βββ΄βββ β β β β ββββ΄ββ΄βββ βββ β β
ββ β β β β βΌ β β β β
ββ β ββΌβ β² β β ββΌβ ββΌβ β β
ββ β βββ΄βββ β β β β βββ ββββ΄ββ΄βββ β β
ββ β β ββββΌββΌβββ β β β β
ββ β ββΌβ β β ββΌβ ββΌβ β β
ββ β βββ β β βββ βββ β β
ββ β β β β β
ββ β β β β β
ββ β β β β β
ββ β β β β β
ββ βββββββββββββββββββββββββββββββββββββ ββββββββββββββββββββββββββββββββββββ β
ββ β
ββ΄ββββββ¬βββ²ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β β
ββ¬ββββββΌβββ΄ββββββββββββββββββββββββββββ ββ¬ββββββββββββββββββββββββββββββββββββ
ββ Prompt Context β ββ LLM β
ββ β ββ β
ββ - plan graph β ββ GPT4-Turbo, Claude 3, BYOM β
ββ - errors ββββΊβ β
ββ - code β ββ β
ββ ββββΌβ β
ββ β ββ β
ββ β ββ β
ββ β ββ β
ββ΄βββββββββββββββββββββββββββββββββββββ ββ΄ββββββββββββββββββββββββββββββββββββ
The AST is generated from ts-morph. This AST allows bumpgen
to understand the relationship between nodes in a codebase.
The plan graph is a concept detailed in codeplan by Microsoft. The plan graph allows bumpgen
to not only fix an issue at a point but also fix the 2nd order breaking changes from the fix itself. In short, it allows bumpgen
to propagate a fix to the rest of the codebase.
We pass the plan graph, the error, and the actual file with the breaking change as context to the LLM to maximize its ability to fix the issue.
We only support gpt-4-turbo-preview
at this time.
bumpgen + GPT-4 Turbo βββββββββββββββββββββ 45% (67 tasks)
We benchmarked bumpgen
with GPT-4 Turbo against a suite of version bumps with breaking changes. You can check out the evals here.
Contributions are welcome! To get set up for development, see Development.
- codeplan
- Typescript/TSX support
-
bumpgen
GitHub app - Embeddings for different package versions
- Use test runners as an oracle
- C# support
- Java support
- Go support
Join our Discord community to contribute, learn more, and ask questions!