This repository has been archived by the owner on Oct 18, 2023. It is now read-only.

build(deps-dev): bump @typescript-eslint/parser from 5.57.0 to 5.59.0 #739

	name: Dependabot

	on:
	pull_request_target:
	# branches: [dependabot/npm_and_yarn/**]

	jobs:
	build:
	runs-on: ubuntu-latest
	if: github.actor == 'dependabot[bot]' && startsWith(github.head_ref, 'dependabot/npm_and_yarn/')

	steps:
	- uses: actions/checkout@v3
	with:
	ref: ${{ github.head_ref }}
	fetch-depth: 2
	token: ${{ secrets.DEPENDABOT_PAT }}
	- uses: actions/setup-node@v3
	with:
	node-version: 16
	- run: npm i -g yarn

	- name: Autofix lockfile
	run: \|
	# restore yarn.lock from the previous commit
	git checkout HEAD^ -- yarn.lock

	# if package.json was not updated, upgrade the dependency
	git diff --name-only HEAD^ HEAD \| grep -q 'package.json' \|\| yarn up `git log -1 --pretty=%s \| awk '{ print $3 }'`

	# restore package.json from the last commit
	git checkout HEAD -- package.json
	- run: yarn config set enableImmutableInstalls false
	- run: yarn install
	- run: \|
	# install yarn-plugin-deduplicate
	yarn plugin import https://raw.githubusercontent.com/eps1lon/yarn-plugin-deduplicate/latest/bin/%40yarnpkg/plugin-deduplicate.js
	# deduplicate lockfile
	yarn deduplicate
	- uses: stefanzweifel/git-auto-commit-action@v4
	with:
	file_pattern: yarn.lock
	commit_message: Dependabot autofix [skip netlify]
	# - uses: mshick/add-pr-comment@v1
	# with:
	# message: \|
	# @dependabot squash and merge
	# repo-token: ${{ secrets.GITHUB_TOKEN }}

Provide feedback