From 47c337ec62d83a5903d4f0336ae33431a212a9c3 Mon Sep 17 00:00:00 2001 From: Evan Rusackas Date: Mon, 29 Jan 2024 18:28:58 -0700 Subject: [PATCH] chore(dependabot): auto-update lockfiles for monorepo package bumps (#26872) Co-authored-by: Maxime Beauchemin --- .../workflows/update-monorepo-lockfiles.yml | 39 +++++++++++++++++++ 1 file changed, 39 insertions(+) create mode 100644 .github/workflows/update-monorepo-lockfiles.yml diff --git a/.github/workflows/update-monorepo-lockfiles.yml b/.github/workflows/update-monorepo-lockfiles.yml new file mode 100644 index 000000000..3a4919a4a --- /dev/null +++ b/.github/workflows/update-monorepo-lockfiles.yml @@ -0,0 +1,39 @@ +name: Update Lockfiles for Dependabot Monorepo PRs + +on: + pull_request: + paths: + - 'superset-frontend/packages/**/package.json' + - 'superset-frontend/plugins/**/package.json' + # Trigger this workflow when Dependabot creates a pull request + types: [opened] + +jobs: + update-lock-file: + runs-on: ubuntu-latest + if: github.event.pull_request.user.login == 'dependabot[bot]' # Ensure it only runs for Dependabot PRs + defaults: + run: + working-directory: superset-frontend + steps: + - name: Checkout Code + uses: actions/checkout@v2 + with: + ref: ${{ github.head_ref }} # Checkout the branch that made the PR + + - name: Set up Node.js + uses: actions/setup-node@v2 + with: + node-version: '16' + + - name: Install Dependencies and Update Lock File + run: | + npm install + + - name: Commit and Push Changes + run: | + git config user.name "GitHub-Actions[bot]" + git config user.email "github-actions[bot]@users.noreply.github.com" + git add package-lock.json + git commit -m "Update lock file for Dependabot PR" -a # Commit the changes + git push # Push the changes back to the branch