Skip to content

Conversation

@naman9271
Copy link

Fixes: #1247

This pull request introduces a new GitHub Actions workflow for automated dependency checking and reporting. The workflow runs weekly and checks both Composer (PHP) and NPM (JavaScript) dependencies for outdated packages, automates merging of safe Dependabot PRs, and creates or updates a summary issue to inform maintainers about the status of dependencies.

Automated Dependency Checking and Reporting:

  • Added .github/workflows/dependency-check.yml workflow to run scheduled checks for outdated Composer and NPM dependencies, generating summary logs for maintainers.
  • Composer and NPM jobs install dependencies, check for outdated packages, and append results to the GitHub Actions summary for easy review.

Dependabot Integration:

  • Implemented an auto-merge job for Dependabot PRs that are patch or minor version updates, reducing manual intervention for safe updates.

Automated Issue Creation:

  • Added a job to create or update a "Dependency Update Report" issue summarizing the results of the weekly checks, including actionable recommendations and links to job logs.

@naman9271
Copy link
Author

Hi @joaquinvanschoren , @janvanrijn please review when you get a chance - thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add dependency-check.yml Workflow

1 participant