From e346c6f8c2238316b4f3b4f173a849f2a92c0128 Mon Sep 17 00:00:00 2001 From: Iveta Date: Fri, 15 Oct 2021 14:34:26 -0400 Subject: [PATCH 1/3] Replace dependabot with GitHub Action --- .github/dependabot.yml | 9 --------- .github/workflows/update_deps.yml | 26 ++++++++++++++++++++++++++ 2 files changed, 26 insertions(+), 9 deletions(-) delete mode 100644 .github/dependabot.yml create mode 100644 .github/workflows/update_deps.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index f4fcbd5d..00000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,9 +0,0 @@ -version: 2 -updates: - # Enable version updates for npm - - package-ecosystem: "npm" - # Look for `package.json` and `lock` files in the `root` directory - directory: "/" - # Check for updates once a month - schedule: - interval: "monthly" diff --git a/.github/workflows/update_deps.yml b/.github/workflows/update_deps.yml new file mode 100644 index 00000000..f3a8a344 --- /dev/null +++ b/.github/workflows/update_deps.yml @@ -0,0 +1,26 @@ +name: Monthly dependency updates +on: + schedule: + # First of every month + - cron: 0 0 1 * * + +jobs: + create_issue: + name: Update dependencies + runs-on: ubuntu-latest + permissions: + issues: write + steps: + - name: Update dependencies + uses: imjohnbo/issue-bot@v3.3.4 + with: + title: "Update dependencies" + body: | + Update all project dependencies + ``` + yarn upgrade-interactive --latest + ``` + pinned: false + close-previous: false + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} From 6a6c9f9e384781a15ec179c0ac986ba0524f7645 Mon Sep 17 00:00:00 2001 From: Iveta Date: Fri, 15 Oct 2021 15:11:25 -0400 Subject: [PATCH 2/3] Use commit SHA instead of tag Co-authored-by: Marcelo Salloum dos Santos --- .github/workflows/update_deps.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/update_deps.yml b/.github/workflows/update_deps.yml index f3a8a344..45812653 100644 --- a/.github/workflows/update_deps.yml +++ b/.github/workflows/update_deps.yml @@ -12,7 +12,7 @@ jobs: issues: write steps: - name: Update dependencies - uses: imjohnbo/issue-bot@v3.3.4 + uses: imjohnbo/issue-bot@7e438653c0da13f4f79678a56bb9ecbd9dcc26ac with: title: "Update dependencies" body: | From f42a527d310d33007cde64cf8d3190bea9912687 Mon Sep 17 00:00:00 2001 From: Iveta Date: Mon, 18 Oct 2021 09:57:29 -0400 Subject: [PATCH 3/3] Update issue description --- .github/workflows/update_deps.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/update_deps.yml b/.github/workflows/update_deps.yml index f3a8a344..ace2930f 100644 --- a/.github/workflows/update_deps.yml +++ b/.github/workflows/update_deps.yml @@ -16,10 +16,11 @@ jobs: with: title: "Update dependencies" body: | - Update all project dependencies + Update all project dependencies. ``` yarn upgrade-interactive --latest ``` + Make sure there are no issues in the code editor, code compiles, and it runs without issues in the browser. pinned: false close-previous: false env: