feat: self healing dependabot updates

.github/workflows/99-self-healing-dependabot-updates.yml

@@ -0,0 +1,91 @@
+name: Auto-Format with Stylelint and Prettier on PR for "self-healing" PRs
+
+on:
+  workflow_call:
+
+jobs:
+  format:
+    if: ${{ github.actor == 'dependabot[bot]' }}
+    runs-on: ubuntu-24.04 # Use Ubuntu 24.04 explicitly
+    permissions:
+      contents: write
+      pull-requests: write
+    env:
+      NEW_PR_BRANCH: "${{ github.head_ref }}-auto"
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.head_ref }}
+
+      - name: Check if Stylelint or Prettier update PR
+        id: check_pr
+        run: |
+          echo "PR title: ${{ github.event.pull_request.title }}"
+          if [[ "${{ github.event.pull_request.title }}" =~ "bump stylelint from" ]]; then
+            echo "Stylelint update detected."
+            echo "stylelint_update=true" >> $GITHUB_ENV
+          elif [[ "${{ github.event.pull_request.title }}" =~ "bump prettier from" ]]; then
+            echo "Prettier update detected."
+            echo "prettier_update=true" >> $GITHUB_ENV
+          else
+            echo "No Stylelint or prettier updates detected."
+          fi
+
+      - name: Set up Node.js
+        if: env.stylelint_update == 'true' || env.prettier_update == 'true'
+        uses: actions/setup-node@v4
+        with:
+          node-version-file: ".nvmrc"
+
+      - name: Install dependencies
+        if: env.stylelint_update == 'true' || env.prettier_update == 'true'
+        run: |
+          npm ci
+
+      - name: Run Stylelint to format the code
+        if: env.stylelint_update == 'true'
+        run: |
+          npm run lint:stylelint --fix
+
+      - name: Run Prettier to format the code
+        if: env.prettier_update == 'true'
+        run: |
+          npx --no prettier . --write
+
+      # https://docs.github.com/en/apps/creating-github-apps/authenticating-with-a-github-app/making-authenticated-api-requests-with-a-github-app-in-a-github-actions-workflow
+      - name: 🧬 Generate a token
+        if: env.stylelint_update == 'true' || env.prettier_update == 'true'
+        id: generate-token
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ vars.AUTO_MERGE_APP_ID }}
+          private-key: ${{ secrets.AUTO_MERGE_PRIVATE_KEY }}
+
+      - name: 🏗️ Create new branch and commit changes
+        if: env.stylelint_update == 'true' || env.prettier_update == 'true'
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          git config --global user.name "github-actions[bot]"
+          git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
+
+          git checkout -b "$NEW_PR_BRANCH"
+          git add .
+
+          # We can't use semantic commits here because of the if statement in the workflow
+          git commit --no-verify --all -m "auto format code" || echo "No changes to commit"
+          git push -f origin "$NEW_PR_BRANCH"
+
+      - name: 🪗 Create Pull Request
+        if: env.stylelint_update == 'true' || env.prettier_update == 'true'
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh pr create --base ${{ github.head_ref }} --head "$NEW_PR_BRANCH" --title "Automated PR: Auto update snapshots" --body "This PR was created automatically by a GitHub Action."
+
+      - name: 🤖 Squash the PR
+        if: env.stylelint_update == 'true' || env.prettier_update == 'true'
+        run: gh pr merge --squash "$NEW_PR_BRANCH"
+        env:
+          GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}

.github/workflows/pull-request.yml

@@ -15,6 +15,10 @@ jobs:
   dependabot:
     uses: ./.github/workflows/99-auto-merge.yml
 
+  self-healing-dependabot-updates:
+    uses: ./.github/workflows/99-self-healing-dependabot-updates.yml
+    secrets: inherit
+
   codeql:
     uses: ./.github/workflows/99-codeql-analysis.yml
 

package.json

@@ -34,7 +34,7 @@
     "lint": "npm-run-all -p lint:*",
     "lint:jscpd": "jscpd . --exitCode 1 --config .config/.jscpd.json",
     "lint:markdownlint": "markdownlint -c .config/.markdown-lint.yml **/*.md",
-    "lint:stylelint": "stylelint **/*.scss",
+    "lint:stylelint": "stylelint **/*.{css,scss}",
     "lint:xo": "cross-env TIMING=1 NODE_OPTIONS=\"--max-old-space-size=4096\" xo",
     "prepare": "husky",
     "regenerate:screenshots": "npm run build && npm run build --workspace=react-showcase && docker-compose -f ./e2e/docker-compose.regenerate.yml up",