atc0005 / shared-project-resources

Shared workflows and tooling for projects that I maintain
MIT License
1 stars 0 forks source link

Add non-critical/informational GHAW job to look for newer minor or patch releases #23

Closed atc0005 closed 1 year ago

atc0005 commented 1 year ago

Currently Dependabot doesn't provide pseudo-version updates, nor does it seem to report available updates for indirect dependencies. Maybe there is a configuration setting that can be toggled to enable this, but I'm not aware of one.

Until something changes, it would be useful to emit potential updates via CI job in a way that it won't fail the CI checks, but yet still make those details available for review.

Potential example using the atc0005/check-statuspage repo:

$ go list -mod=mod -u -m all | grep '\['
github.com/coreos/go-systemd/v22 v22.3.3-0.20220203105225-a9a7ef127534 [v22.4.0]
github.com/davecgh/go-spew v0.0.0-20161028175848-04cdfd42973b [v1.1.1]
github.com/godbus/dbus/v5 v5.0.4 [v5.1.0]
github.com/mattn/go-colorable v0.1.12 [v0.1.13]
github.com/mattn/go-isatty v0.0.14 [v0.0.16]
github.com/pmezard/go-difflib v0.0.0-20151028094244-d8ed2627bdf0 [v1.0.0]
github.com/stretchr/testify v0.0.0-20161117074351-18a02ba4a312 [v1.8.0]
golang.org/x/sys v0.0.0-20210927094055-39ccf1dd6fa6 [v0.0.0-20221006211917-84dc82d7e875]

References:

atc0005 commented 1 year ago

Fixed per #25.