antfu-collective / taze

🥦 A modern cli tool that keeps your deps fresh
MIT License
2.88k stars 85 forks source link

Scan `.github/workflows` directory and updated outdated actions #143

Open SukkaW opened 2 months ago

SukkaW commented 2 months ago

Clear and concise description of the problem

Use taze CLI to scan and update the version of outdated GitHub Actions.

Suggested solution

We could scan the .github/workflows dir (if exists) to find any .yaml and .yml files. We could then use GitHub API of sorts to grab all tags of the outdated action.

Alternative

No response

Additional context

No response

Validations

HigherOrderLogic commented 2 months ago

I think this is out of scopes for taze and having a dedicated package for this function would be more appropriate.

Also, if you would like something more "modern", I would suggest using Renovate, which has this feature built-in and can be configured to run periodically against your repo and workflows.

antfu commented 2 months ago

I don't mind having it but it would require quite some work as the parsing and checking would have very different logic than NPM packages. I would count on the community to work on that. PR welcome.

antfu commented 2 months ago

something more "modern", I would suggest using Renovate

It's not about "modern" or not, this tool was created after Renovate already exists. People choose to not use Renovate for various reasons.

SukkaW commented 2 months ago

I would count on the community to work on that. PR welcome.

I have noticed a few prior arts about this:

We might be able to port this to the taze w/ TypeScript.