Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(dependabot): auto-update lockfiles for monorepo package bumps #26872

Merged
merged 3 commits into from
Jan 30, 2024
Merged
Changes from 2 commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
39 changes: 39 additions & 0 deletions .github/workflows/update-monorepo-lockfiles.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,39 @@
name: Update Lockfiles for Dependabot Monorepo PRs

on:
pull_request:
paths:
- 'superset-frontend/packages/**/package.json'
- 'superset-frontend/plugins/**/package.json'
# Trigger this workflow when Dependabot creates a pull request
types: [opened, synchronize, reopened]
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'd say this should only trigger on opened, not the others. We don't want it to trigger itself, even though I think git push should be a no-op when the files does not change on the second run.


jobs:
update-lock-file:
runs-on: ubuntu-latest
if: github.event.pull_request.user.login == 'dependabot[bot]' # Ensure it only runs for Dependabot PRs
defaults:
run:
working-directory: superset-frontend
steps:
- name: Checkout Code
uses: actions/checkout@v2
with:
ref: ${{ github.head_ref }} # Checkout the branch that made the PR

- name: Set up Node.js
uses: actions/setup-node@v2
with:
node-version: '16'

- name: Install Dependencies and Update Lock File
run: |
npm install

- name: Commit and Push Changes
run: |
git config user.name "GitHub-Actions[bot]"
git config user.email "github-actions[bot]@users.noreply.github.com"
git add package-lock.json
git commit -m "Update lock file for Dependabot PR" -a # Commit the changes
git push # Push the changes back to the branch
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assuming this is a no-op on the second run.

Loading