feat: add a workflow that cleans up after dependabot #1776
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Adds a workflow that hopefully
npm run boot
which runslerna bootstrap
in both plugins and examplesThe reason this is needed is because when dependabot makes a PR it updates the package-lock for a plugin but doesn't run
lerna bootstrap
. The result is that plugins keep having local dependencies added to their package-locks by dependabot, and then later they might be removed when a human runslerna bootstrap
, cluttering up other PRs. These local dependencies should not be part of thepackage-lock
files -- that's just how lerna works :/No idea if it works as intended until we submit it and try to run it on a dependabot PR, but at the very least I'm pretty confident it shouldn't ruin anyone else's non-dependabot PRs.