[Case Study] GitHub Actions

[arcanis]

What package is covered by this investigations?

GitHub Actions

Describe the goal of the investigation

Now that the GitHub Actions support CI systems, we should figure out which actions the yarnpkg org should provide that would help maintaining our projects.

Investigation report

The following actions look interesting:

• An action that setup the right Yarn binary (or just shell out to the local build if no version is provided in the local variables).

• A "sanity check action" that ensures that the PR is in a valid state against master (no added / modified files when running install, no removed files when running cache clean, ...)

Any more ideas?

[juanpicado]

Does the second suggestion includes the scenario when the lock file is outdated? For instance. It common to see some PR do not include the lock file updated.

yarn upgrade-interactive
yarn upgrade-interactive v1.17.3
error Outdated lockfile. Please run `yarn install` and try again.

[cometkim]

https://github.com/cometkim/yarn-plugin-bump

Built a plugin for bumping dependencies in GitHub Action. so fun 😃