chore: add GitHub action for automatically updating dependencies.

Brightspace / d2l-license-checker

Simple tool to continuously check for D2L accepted licenses of all npm dependencies in a project.

4 stars 2 forks source link

Closed neverendingqs closed 3 years ago

neverendingqs commented 3 years ago

This action automatically updates deps via npm-check-updates and npm audit --fix, and creates a pull request with the changes.

Pros:

Cons:

If the build breaks, it might be harder to identify which package change caused it
Actions done by GitHub actions workflows do not trigger GitHub action workflows. This repo is currently using Travis CI, but if we ever switch to GitHub actions for CI, PRs created by this workflow won't trigger CI.

neverendingqs commented 3 years ago

@JimD2L - I wasn't sure who else to add before merging for this and https://github.com/Brightspace/d2l-license-checker/pull/95. Please let me know if I should request another reviewer. Thanks!

neverendingqs commented 3 years ago

The PRs are pretty benign, so I'm comfortable merging now. @JimD2L, please let me know if you would like changes or a revert.

ghost commented 3 years ago

:tada: This PR is included in version 3.2.0 :tada:

The release is available on:

Your semantic-release bot :package::rocket: