Description

I'm sorry, I have created a monster 🧌 But this happens when you create a monster by embedding dependency versions inside shell script files 😅

This workflow is carefully crafted though and works surprisingly well imo :)

Some of our scripts download tools from a repo. These can't be bumped by dependabot, so this workflow is a self-created dependabot to bump versions of those tools to stay up-to-date. This workflow only creates a PR if the version was actually updated.

Tools currently supported:

• Shellcheck (in 2 different files)
• Shellfmt
• oci-oras
• Bat

This will only run once a month since the tools we use are usually not updated frequently. Maybe every two weeks/twice a month would also be fine? Let me know.

How Has This Been Tested?

• [x] Workflow run: https://github.com/ColorfulRhino/build/actions/runs/9857502042
• [x] Created PR: https://github.com/ColorfulRhino/build/pull/8

Checklist:

• [x] My code follows the style guidelines of this project
• [x] I have performed a self-review of my own code
• [x] I have commented my code, particularly in hard-to-understand areas
• [x] Any dependent changes have been merged and published in downstream modules

View the full article