dmnq-f/CMake Dependency Checker

Scan CMake FetchContent dependencies for available updates with optional PRs.

Trust Signals

name	description	required	default
path	Path to CMakeLists.txt or project root directory	no	CMakeLists.txt
scan-only	List dependencies without checking for updates	no	false
exclude	Directory exclusion patterns, one per line	no	""
ignore	Dependency names to exclude from results, one per line	no	""
update-types	Only include these update types in results and PRs (comma-separated: major, minor, patch, unknown). If unset, all types are included.	no	""
fail-on-updates	Fail the workflow if any dependency has an available update	no	false
create-prs	Create pull requests for available updates	no	false
resolve-sha	Reverse-resolve SHA-pinned GIT_TAG values against upstream tag commit SHAs to enable update checking on them. Set to false to keep SHA-pinned deps classified as pinned.	no	true
dry-run	Log what PRs would be created without actually creating them (requires create-prs: true)	no	false
token	GitHub token for creating PRs. Use a GitHub App token or PAT if PR checks must trigger.	no	${{ github.token }}

name	description
has-updates	Whether any dependency has an available update (true/false)
total	Total number of dependencies found
updates-available	Number of dependencies with available updates
result-json	Full scan result as JSON string
prs-created	Number of pull requests created