Labelling the pull request

This action now labels the pull request (dependencies by default).

Now supports running a pre-commit script.

Pre-commit script input details:

  pre-commit-script:
    description: A command to run before committing the dependency changes (e.g. npm run build)

Example usage:

name: Scheduled dependencies update
on:
  schedule:
    - cron:  '0 15 * * 2'
  workflow_dispatch:
jobs:
  update-deps:
    name: Update Node dependencies
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v2
      - uses: neverendingqs/gh-action-node-update-deps@master
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          bump-version: patch
          package-manager: yarn
          pre-commit-script: npm run build

Using renamed base image and updating readme

v1.5.0

readme: update version to master.

Link to workflow run

Resulting pull request now links back to workflow run that generated the pull request.

Pre-built image.

Now uses pre-built image to reduce runtime.

Fixing scenarios where npm audit fixes something that was updated

There are certain scenarios where npm-check-updates modifies a dependency that npm audit fix wants to change as well. This is resolved by updating the package lock file first before running npm audit fix.

Adding npm audit call

If using npm, it now runs npm audit fix as well.

Add more examples in README

Added an example of the bump-version input.

Version Bump Support

Added support for bumping the package version at the same time. Can be paired with publish-me-maybe to automatically deploy package with updated dependencies on merge.

Initial Release

First release of this action.