slsa-framework / slsa-verifier

Verify provenance from SLSA compliant builders
Apache License 2.0
216 stars 45 forks source link

feat: repackage node libs during renovate #754

Closed ramonpetgrave64 closed 1 month ago

ramonpetgrave64 commented 3 months ago

renovate-bot won't automatically re-ccompile the dist folders after bumping versionsin package.json and package-lock.json

This PR attempts to add an additional instruction to renovate-bot to do (cd ./actions/installer && make clean && make package) .

I see a small note suggesting this won't yet work for us

Post-upgrade tasks can only be used on self-hosted Renovate instances.

Testing

I have not found a reliable way to test, other than first merging, and then waiting for another renovate bot re-run, eg.