From fc211418c4a3961b00b255c855c10131d1f1540c Mon Sep 17 00:00:00 2001 From: Harsh Shandilya Date: Tue, 30 Nov 2021 17:56:05 +0530 Subject: Implement workarounds for Dependabot to update dependencies (#1552) --- .github/dependabot.yml | 11 +++++++- .github/workflows/dependency_sync.yml | 53 +++++++++++++++++++++++++++++++++++ 2 files changed, 63 insertions(+), 1 deletion(-) create mode 100644 .github/workflows/dependency_sync.yml (limited to '.github') diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 5ace4600..ea0377c1 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,6 +1,15 @@ version: 2 updates: + - package-ecosystem: "gradle" + directory: "/" + schedule: + interval: "daily" + + open-pull-requests-limit: 1 + labels: + - "A-dependencies" + - package-ecosystem: "github-actions" directory: "/" schedule: - interval: "weekly" + interval: "daily" diff --git a/.github/workflows/dependency_sync.yml b/.github/workflows/dependency_sync.yml new file mode 100644 index 00000000..ccc4d1ba --- /dev/null +++ b/.github/workflows/dependency_sync.yml @@ -0,0 +1,53 @@ +name: DependencySync + +on: + workflow_dispatch: + pull_request_target: + branches: + - develop + +jobs: + cancel-other-jobs: + + runs-on: ubuntu-latest + + steps: + # cancel previous jobs + - name: Cancel Previous Runs + uses: styfle/cancel-workflow-action@0.9.0 + env: + access_token: '${{ secrets.PSL_UPDATE_TOKEN }}' + + dependency-sync: + + runs-on: ubuntu-latest + + steps: + + - uses: actions/checkout@v2 + with: + token: ${{ secrets.PSL_UPDATE_TOKEN }} + ref: ${{ github.event.pull_request.head.ref }} + fetch-depth: 0 + + - uses: gradle/wrapper-validation-action@v1 + + - name: Set up JDK + uses : actions/setup-java@v2 + with : + distribution : 'adopt' + java-version : '11' + cache: 'gradle' + + - uses: gradle/gradle-build-action@cba1833ddecbbee649950c284416981928631008 + name: run dependencySync + with: + arguments: | + dependencySync + + # If the copy generated changes, commit and push those changes. + - name: commit changes + uses: stefanzweifel/git-auto-commit-action@v4 + with: + commit_message: sync dependency definitions + commit_options: '--no-verify --signoff' -- cgit v1.2.3