Weekly #7

	name: Weekly
	on:
	schedule:
	- cron: "0 4 * * 6"
	workflow_dispatch: ~

	permissions: read-all

	jobs:
	npm-deps:
	name: Update transitive dependencies
	runs-on: ubuntu-24.04
	permissions:
	contents: write # To push a commit
	pull-requests: write # To open a Pull Request
	steps:
	- name: Checkout repository
	uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
	with:
	persist-credentials: false
	- name: Verify action checksums
	uses: ./.github/actions/ghasum
	- name: Install Node.js
	uses: actions/[email protected]
	with:
	cache: npm
	node-version-file: .nvmrc
	- name: Create automation token
	uses: actions/[email protected]
	id: automation-token
	with:
	app-id: ${{ secrets.AUTOMATION_APP_ID }}
	private-key: ${{ secrets.AUTOMATION_APP_PRIVATE_KEY }}
	- name: Install dependencies
	run: npm clean-install
	- name: Update dependencies
	run: \|
	npm update \
	--prefer-dedupe \
	--before "$( date -u -d "@$(($(date +%s) - 22460*60))" +"%Y-%m-%d" )"
	- name: Restore runtime dependency versions
	run: \|
	npm install [email protected]
	sed -i 's/"which": "3.0.0"/"which": "^3.0.0 \|\| ^4.0.0 \|\| ^5.0.0"/g' package*.json
	- name: Create Pull Request
	uses: peter-evans/[email protected]
	with:
	token: ${{ steps.automation-token.outputs.token }}
	title: Update transitive dependencies
	body: _This Pull Request was created automatically_
	branch: npm-transitive-dependencies
	labels: dependencies
	commit-message: Update transitive dependencies
	add-paths: \|
	package.json
	package-lock.json

Provide feedback