Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Show Outdated GitHub Actions Dependencies #928

Open
fishcharlie opened this issue May 15, 2020 · 6 comments
Open

Show Outdated GitHub Actions Dependencies #928

fishcharlie opened this issue May 15, 2020 · 6 comments
Labels
actions core This issue is not accepting PRs from outside contributors enhancement a request to improve CLI

Comments

@fishcharlie
Copy link

Describe the feature or problem you’d like to solve

There is no good way currently to view outdated GitHub Actions Dependencies. In npm this can be done with npm outdated. It would be awesome if there was a way to do this in the GitHub CLI to easily view which GitHub Actions Dependencies are outdated and potentially even update them automatically.

Proposed solution

Potentially something like: gh actions outdated. This would then look inside each workflow and find all the actions that are outdated and list them. Similar to how npm outdated works.

I'm unsure if the syntax gh actions outdated makes sense, and there should probably be more discussion around the best command for this.

@fishcharlie fishcharlie added the enhancement a request to improve CLI label May 15, 2020
@StefMa
Copy link

StefMa commented May 15, 2020 via email

@fishcharlie
Copy link
Author

@StefMa So this could truly go either way IMO. I can see how it'd make sense to have an API or something like this first. However, the comparison is to npm, which has npm outdated. The question is what is the scope of the CLI. And as it's still in beta, I figure now is the time to shape that and give my opinions for what I'd like to see.

When I realized the need for this feature, the first thing I thought about is if the GitHub CLI had this. It didn't. So I created an issue. I for sure didn't think through what the best interface is for this and how exactly it'd work. But to me, it is meaningful that my first thought was to integrate this into the GitHub CLI due to the similarity of npm outdated.

So although it was on a whim, I do think it's valuable to think off the top of your head sometimes, and that lead to this issue.

@mislav
Copy link
Contributor

mislav commented May 15, 2020

It's certainly an interesting proposal, thank you. We've been also getting other feature requests to support Actions, such as exposing an interface to repository Secrets. None of the Actions work is on our roadmap yet, but we might factor these ideas in our future planning.

@vilmibm vilmibm added the core This issue is not accepting PRs from outside contributors label Oct 7, 2020
@chrispat
Copy link

Dependabot should provide information about actions you are referencing in your workflows that have new versions.

@vilmibm vilmibm mentioned this issue Feb 1, 2021
31 tasks
@andreasabel
Copy link

@chrispat Can I run dependabot locally from the command line?
(I know a very useful cli tool called actionlint, unfortunately, it does not show outdated actions...)

@AlexHedley
Copy link

Having dependabot baked into the cli would be a great idea.
Being able to run a command that checks each workflow for updates and updates them would be very helpful.

examples
npm-check-updates
ncu -i

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
actions core This issue is not accepting PRs from outside contributors enhancement a request to improve CLI
Projects
None yet
Development

No branches or pull requests

7 participants