Check GHA For Dependency Updates
$ CheckWorkflow remote sco1 check-workflow
lint_test.yml
+-------------+-------------------------+---------------------------+-----------+--------+
| Job | Step Name | Action | Specified | Latest |
+-------------+-------------------------+---------------------------+-----------+--------+
| lint | None | actions/checkout | ~=4.0 | 5.0.0 |
| test | None | actions/checkout | ~=4.0 | 5.0.0 |
| combine-cov | None | actions/checkout | ~=4.0 | 5.0.0 |
| combine-cov | Pull workflow artifacts | actions/download-artifact | ~=4.0 | 5.0.0 |
+-------------+-------------------------+---------------------------+-----------+--------+
release.yml
+-------+-----------+------------------+-----------+--------+
| Job | Step Name | Action | Specified | Latest |
+-------+-----------+------------------+-----------+--------+
| build | None | actions/checkout | ~=4.0 | 5.0.0 |
+-------+-----------+------------------+-----------+--------+
Since this is mainly intended as a personal helper, I do not intend to deploy this project to PyPI. Wheels are built in CI for each released version.
Alternatively, you can use a tool like uv or pipx to run or install this project as a standalone tool, e.g.:
$ uvx --from git+https://github.com/sco1/check-workflow@v1.3.0 CheckWorkflow --help
usage: CheckWorkflow [-h] {local,remote} ...
positional arguments:
{local,remote}
local Query local project
remote Query remote repository
options:
-h, --help show this help message and exit
Manual reports can be generated using the CheckWorkflow CLI for either a local or remote project.
$ CheckWorkflow local --help
usage: CheckWorkflow local [-h] [-r ROOT] [-m]
options:
-h, --help show this help message and exit
-r ROOT, --root ROOT Workflow root (default: ./.github/workflows/)
-m, --markdown Format report as markdown (default: False)
$ CheckWorkflow remote --help
usage: CheckWorkflow remote [-h] [-b BRANCH] [-r ROOT] [-m] org repo
positional arguments:
org Query repository parent
repo Query repository
options:
-h, --help show this help message and exit
-b BRANCH, --branch BRANCH
Query branch (default: main)
-r ROOT, --root ROOT Workflow root (default: .github/workflows/)
-m, --markdown Format report as markdown (default: False)
Because I don't want to! 😊
The idea initially came because Dependabot for a very long time did not support grouping PRs, which led to a ton of noise that I didn't particularly care for. Though it was eventually added, workflow updates aren't something I need to constantly be pinged on to take care of; it's sufficient for my needs to bump them while I'm bumping or adjusting other things.
Also it's fun to solve problems on my own.