From 99853a2502804ecf680708150f131d38002ed2b7 Mon Sep 17 00:00:00 2001 From: Gregor MacLennan Date: Tue, 22 Oct 2024 20:33:35 +0100 Subject: [PATCH 1/2] fix: fix updating comments in lockfile-changes workflow --- .github/workflows/lockfile.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/lockfile.yml b/.github/workflows/lockfile.yml index 524d2c63d..5e7cd84be 100644 --- a/.github/workflows/lockfile.yml +++ b/.github/workflows/lockfile.yml @@ -29,7 +29,8 @@ jobs: private-key: ${{ secrets.LOCKFILE_BOT_PRIVATE_KEY }} - name: NPM Lockfile Changes # The original doesn't support v3 lockfiles so we use a fork that adds support for them - uses: rvanvelzen/npm-lockfile-changes@6fded38b5a054f5ab49efd6850668e796f780604 + # The fork doesn't update comments by an app token, so we use our own fork + uses: digidem/npm-lockfile-changes@fix/update-comments with: token: ${{ steps.app-token.outputs.token }} updateComment: true From 8e8a3a383cfb4c2a23de4accef5f5ed1b926f926 Mon Sep 17 00:00:00 2001 From: Gregor MacLennan Date: Wed, 23 Oct 2024 09:49:50 +0100 Subject: [PATCH 2/2] fix version of lockfile action to commit sha --- .github/workflows/lockfile.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/lockfile.yml b/.github/workflows/lockfile.yml index 5e7cd84be..5df5a4960 100644 --- a/.github/workflows/lockfile.yml +++ b/.github/workflows/lockfile.yml @@ -30,7 +30,7 @@ jobs: - name: NPM Lockfile Changes # The original doesn't support v3 lockfiles so we use a fork that adds support for them # The fork doesn't update comments by an app token, so we use our own fork - uses: digidem/npm-lockfile-changes@fix/update-comments + uses: digidem/npm-lockfile-changes@614dfc33742374cb40bec2878e5b690580d11ede with: token: ${{ steps.app-token.outputs.token }} updateComment: true