yanovian/Update Dependencies
Scans every package manager in a repo, updates dependencies, and opens a PR, gated on checks if you give it any
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| update-strategy | How far to update: non-breaking (stay within the current major version) or breaking (allow major version jumps) | no | non-breaking |
| check-commands | Commands to run after updating, one per line, in order. Every command must succeed or no pull request is created. | no | "" |
| min-release-age-days | Minimum number of days a version must have been published before this Action will update to it. A version that fixes a known vulnerability (checked via OSV.dev) always bypasses this. Set to 0 to disable. | no | 3 |
| create-pull-request | Whether to open a pull request when updates are found and every command passes | no | true |
| base-branch | Branch to base the pull request on. Defaults to the repository default branch. | no | "" |
| branch-name | Prefix for the branch this Action commits to, the actual branch is <branch-name>/<run-date>. Defaults to chore/update-deps/<update-strategy>. | no | "" |
| config-path | Path to the config file in this repo for ignoring ecosystems or paths | no | .github/update-dependencies.yml |
| working-directory | Directory to scan, relative to the repository root | no | . |
| github-token | Token used to push the update branch and open the pull request | no | ${{ github.token }} |
Outputs
| name | description |
|---|---|
| updated | true if any dependency was updated |
| pull-request-number | Number of the pull request that was created or updated, if any |
| pull-request-url | URL of the pull request that was created or updated, if any |
| changes-summary-path | Path to the full JSON summary of changes written to disk |
| commands-passed | true if every command in `check-commands` exited successfully |