lock-maintenance.yml

name: Package lock maintenance
on:
  workflow_dispatch:

permissions:
  contents: read

jobs:
  build:
    permissions:
      contents: write # for peter-evans/create-pull-request to create branch
      pull-requests: write # for peter-evans/create-pull-request to create a PR
    name: Bump transitional dependencies
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
      - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
        with:
          node-version: '16'
          cache: 'npm'
      - name: Create commit
        run: |
          rm package-lock.json
          npm install
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f # v7.0.6
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          commit-message: 'Bump transitional dependencies'
          committer: 'Github Actions <41898282+github-actions[bot]@users.noreply.github.com>'
          author: 'Github Actions <41898282+github-actions[bot]@users.noreply.github.com>'
          title: 'Bump transitional dependencies'
          body: Transitional dependencies bump.
          labels: 'dependencies'