[Snyk] Security upgrade @docusaurus/preset-classic from 2.4.1 to 3.5.0 #79
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Dependabot Update All Go Modules | |
| on: pull_request | |
| permissions: | |
| pull-requests: write | |
| jobs: | |
| update-all: | |
| runs-on: ubuntu-latest | |
| if: ${{ github.actor == 'dependabot[bot]' }} | |
| steps: | |
| - uses: actions/checkout@v3 | |
| with: | |
| repository: ${{ github.event.pull_request.head.repo.full_name }} | |
| ref: ${{ github.event.pull_request.head.ref }} | |
| # Secret to be added in the repo under Settings > Secrets > Dependabot | |
| token: ${{ secrets.PRBOT_PAT }} | |
| - uses: actions/setup-go@v4 | |
| with: | |
| go-version: "1.21" | |
| check-latest: true | |
| - name: Extract updated dependency | |
| id: deps | |
| run: | | |
| # Extract the dependency name from the PR title | |
| # Example: "build(deps): Bump github.com/cosmos/cosmos-sdk from 0.46.0 to 0.47.0" | |
| # Extracts "github.com/cosmos/cosmos-sdk" and "0.47.0" | |
| echo "::set-output name=name::$(echo "${{ github.event.pull_request.title }}" | cut -d ' ' -f 3)" | |
| echo "::set-output name=version::$(echo "${{ github.event.pull_request.title }}" | cut -d ' ' -f 7)" | |
| - name: Update all Go modules | |
| run: | | |
| ./scripts/go-update-dep-all.sh ${{ format('{0}@v{1}', steps.deps.outputs.name, steps.deps.outputs.version) }} | |
| ./scripts/go-mod-tidy-all.sh | |
| - name: Commit changes | |
| uses: EndBug/add-and-commit@v9 | |
| with: | |
| default_author: github_actions | |
| message: "${{ github.event.pull_request.title }} for all modules" |