Merge pull request #78 from vdaas/fix/update-deps

Added workflows to automatically update and merge dependencies and backport dependency update PR

.github/dependabot-cli.yaml

@@ -0,0 +1,16 @@
+job:
+  package-manager: npm_and_yarn
+  allowed-updates:
+    - update-type: all
+  dependency-groups:
+    - name: npm-root
+      rules:
+        patterns:
+          - "*"
+  source:
+    directories:
+      - "/"
+      - "./example"
+      - "./example-ts"
+    provider: github
+    repo: vdaas/vald-client-node

.github/workflows/backport-deps.yaml

@@ -0,0 +1,26 @@
+#
+# Copyright (C) 2019-2024 vdaas.org vald team <[email protected]>
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# You may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+name: "Run backport deps update PR"
+on:
+  push:
+    branches:
+      - main
+jobs:
+  backport:
+    uses: vdaas/vald-client-ci/.github/workflows/_backport-deps.yaml@main
+    secrets:
+      CI_TOKEN: ${{ secrets.CI_TOKEN }}
+      GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}

.github/workflows/pr-auto-merge.yaml

@@ -0,0 +1,26 @@
+#
+# Copyright (C) 2019-2024 vdaas.org vald team <[email protected]>
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# You may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+name: "Run automatically merge bot PR"
+on:
+  pull_request:
+
+jobs:
+  auto-merge:
+    uses: vdaas/vald-client-ci/.github/workflows/_pr-auto-merge.yaml@main
+    with:
+      client_type: node
+    secrets:
+      CI_TOKEN: ${{ secrets.CI_TOKEN }}

.github/workflows/update-deps.yaml

@@ -0,0 +1,31 @@
+#
+# Copyright (C) 2019-2024 vdaas.org vald team <[email protected]>
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# You may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+name: Update npm dependencies
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "0 12 * * *"
+jobs:
+  update:
+    uses: vdaas/vald-client-ci/.github/workflows/_update-deps.yaml@main
+    with:
+      config_file_path: .github/dependabot-cli.yaml
+      pr_branch_name: chore/update-npm
+    secrets:
+      CI_USER: ${{ secrets.CI_USER }}
+      CI_TOKEN: ${{ secrets.CI_TOKEN }}
+      GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}