Scan `.github/workflows` directory and updated outdated actions

[SukkaW]

Clear and concise description of the problem

Use taze CLI to scan and update the version of outdated GitHub Actions.

Suggested solution

We could scan the .github/workflows dir (if exists) to find any .yaml and .yml files. We could then use GitHub API of sorts to grab all tags of the outdated action.

Alternative

No response

Additional context

No response

Validations

• [X] Follow our Code of Conduct
• [X] Read the Contributing Guide.
• [X] Check that there isn't already an issue that request the same feature to avoid creating a duplicate.

[HigherOrderLogic]

I think this is out of scopes for taze and having a dedicated package for this function would be more appropriate.

Also, if you would like something more "modern", I would suggest using Renovate, which has this feature built-in and can be configured to run periodically against your repo and workflows.

[antfu]

I don't mind having it but it would require quite some work as the parsing and checking would have very different logic than NPM packages. I would count on the community to work on that. PR welcome.

[antfu]

something more "modern", I would suggest using Renovate

It's not about "modern" or not, this tool was created after Renovate already exists. People choose to not use Renovate for various reasons.

[SukkaW]

I would count on the community to work on that. PR welcome.

I have noticed a few prior arts about this:

• https://github.com/dsoftwareinc/github-actions-cli

We might be able to port this to the taze w/ TypeScript.