GitHub Action to automatically bump dependencies and create pull request

[campersau]

This will run our bumpdependencies grunt task every day and if the dependencies have changed automatically create a PR with the updated dependency versions.

Example: https://github.com/campersau/ungit/actions/runs/55682312

[Hirse]

Sounds good, but what is the benefit of this over using a service like Dependabot for all dependencies?

[campersau]

Don't have the permission to do that and just wanted to play with GitHub Actions 😄

[Hirse]

Sounds good.
Is it possible to also use GitHub actions for the build?
I tried before, but couldn't get it to work with Nightmare. 😞

[campersau]

Yes, I have done it here https://github.com/campersau/ungit/blob/e25633891ca92f1ed0a0c90f86e15ae2c12ed59b/.github/workflows/ci.yml
Sample run: https://github.com/campersau/ungit/actions/runs/55682534

Here are some random things about that:

• The setup-node action does not print out the actual installed version which is why this line exists.
• On windows because the username runneradmin is too long it gets truncated in some of our tests to use the stupid RUNNER~1 syntax. That's what this line is for. See https://github.com/mvdan/github-actions-golang#known-bugs.
• Publishing artifacts is cool but since the upload-artifact action currently only supports single files or folders this is a bit repetitive. Appveyor supports that which is nice. See result
• Also I currently upload the zipped version it gets zipped again by GitHub. I could also try to use the upload-artifact action to zip the folder for me but I haven't tested it yet. See Electron publish #1241 (comment) for possible issues.
• A good thing is that GitHub actions use the actual powershell on windows instead of travis which uses the git for windows bash that's why updating git inside the git bash doesn't work there but in GitHub actions.
• One of the most annoying things is that GitHub actions don't trigger other GitHub actions which means that the PR created by this bump.yml workflow would not trigger my ci.yml workflow. See PRs created don't trigger other actions peter-evans/create-pull-request#48 and an example PR Bump Dependencies campersau/ungit#3. But it seems that third party CI runs see Bump Dependencies #1297.

Will do a PR later this week.

[Hirse]

Looks pretty good.
Thanks for all the details. Maybe you could include some of those as comments into the file (or link to a page that lists them all).