This action uses an organization-wide token with workflow permissions so that automated tests run on the generated PR.
The action removes git hooks while running (in CI context only) to avoid issues with Husky. Changes to package.json and package-lock.json are the only expected outcomes of the action, so Husky isn't crucial.
The PR message and level of detail could be improved in the future. Fortunately, the file changes are limited and fairly quick to review manually.
This also removes the Dependabot config around NPM dependencies and removes the existing Dependabot combining action file.
This action uses an organization-wide token with workflow permissions so that automated tests run on the generated PR.
The action removes git hooks while running (in CI context only) to avoid issues with Husky. Changes to package.json and package-lock.json are the only expected outcomes of the action, so Husky isn't crucial.
The PR message and level of detail could be improved in the future. Fortunately, the file changes are limited and fairly quick to review manually.
This also removes the Dependabot config around NPM dependencies and removes the existing Dependabot combining action file.