oleg-koval/Dependabot Lockfile Fixer
Merges base branch into Dependabot PR branch, resolves lockfile conflicts, regenerates lockfile, commits and pushes.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| github_token | Token with permission to push to the PR branch (usually GITHUB_TOKEN with contents: write). | yes | — |
| base_ref | Base branch to merge into the PR branch. If empty, uses GITHUB_BASE_REF. | no | "" |
| package_manager | auto | bun | npm | pnpm | yarn | no | auto |
| working_directory | Working directory (monorepo root, etc). | no | . |
| install_command | Override install command (advanced). Example: 'bun install' or 'pnpm -w install'. Empty means auto. | no | "" |
| delete_other_lockfiles_when_bun | If true and bun is used, deletes package-lock.json / yarn.lock / pnpm-lock.yaml to avoid mixed-manager lockfile churn. | no | true |
| commit_message | Commit message used when changes are made. | no | chore(deps): sync base branch and refresh lockfile |
Outputs
no outputs