Zoltan Kochan
fca656586c
Teach `outdated`, interactive `update`, and opt-in non-interactive updates to discover GitHub Actions dependencies in workflow files and referenced local action definitions. Model actions as development dependencies so the existing production/development filters, compatible/latest behavior, explicit selectors, interactive selection, recursive workspace handling, and no-save/lockfile-only semantics remain consistent with package and runtime updates. Keep non-interactive updates package-only unless `--include-github-actions` is passed or `update.githubActions` is enabled in `pnpm-workspace.yaml`. Resolve semantic release tags through Git refs, but never persist a tag as the executable reference. Every changed action is pinned to the resolved commit SHA, with the semantic tag retained in an adjacent comment for readability and future version comparison. Non-semver and Docker references are left untouched. Implement the behavior in both the TypeScript CLI and pacquet and cover discovery, version selection, exact-SHA pinning, comment preservation, selector handling, and formatting preservation.
530 B
530 B
@pnpm/deps.inspection.commands, @pnpm/installing.commands, @pnpm/config.reader, @pnpm/resolving.git-resolver, @pnpm/types, pnpm, pacquet
| @pnpm/deps.inspection.commands | @pnpm/installing.commands | @pnpm/config.reader | @pnpm/resolving.git-resolver | @pnpm/types | pnpm | pacquet |
|---|---|---|---|---|---|---|
| minor | minor | minor | patch | minor | minor | minor |
Added GitHub Actions dependencies to pnpm outdated and interactive pnpm update. Non-interactive updates can include them with --include-github-actions or by setting update.githubActions to true in pnpm-workspace.yaml. Updated actions are pinned to exact commit hashes with their release tags preserved in comments.