Skip to content

Package lock maintenance #18

Package lock maintenance

Package lock maintenance #18

#
# Copyright the original author or authors from the JHipster project.
#
# This file is part of the JHipster project, see https://www.jhipster.tech/
# for more information.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
name: Package lock maintenance
on:
schedule:
- cron: 0 0 * * 6
workflow_dispatch:
permissions:
contents: read
jobs:
build:
permissions:
contents: write # for peter-evans/create-pull-request to create branch
pull-requests: write # for peter-evans/create-pull-request to create a PR
name: Bump transitional dependencies
if: github.repository == 'jhipster/generator-jhipster'
runs-on: ubuntu-latest
steps:
- uses: actions/setup-node@v3
with:
node-version: 18
- run: npm install -g npm@latest
- uses: actions/checkout@v3
- uses: actions/cache@v3
with:
path: ~/.npm
key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}-
restore-keys: |
${{ runner.os }}-node-
- name: Create commit
run: |
rm package-lock.json
npm install || npm install --force
git add .
./test-integration/scripts/04-git-config.sh
git commit -a -m "Bump transitional dependencies" || true
- name: Create Pull Request
uses: peter-evans/create-pull-request@v5
with:
token: ${{ secrets.GITHUB_TOKEN }}
commit-message: 'Bump transitional dependencies'
title: 'Bump transitional dependencies'
body: Weekly transitional dependencies bump.
labels: 'theme: dependencies'