5515db7171
Bumps [actions/checkout](https://github.com/actions/checkout) from 2.4.0 to 3.0.1. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v2.4.0...dcd71f646680f2efd8db4afa5ad64fdcba30e748) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Robert Sese <rsese@github.com>
52 lines
1.7 KiB
YAML
52 lines
1.7 KiB
YAML
name: Package lock lint
|
|
|
|
# **What it does**: Makes sure package.json and package-lock.json is in sync
|
|
# **Why we have it**: Accidental manual edits of the dependencies directly in package.json
|
|
# **Who does it impact**: Docs engineering/writers/contributors.
|
|
|
|
on:
|
|
pull_request:
|
|
paths:
|
|
- package.json
|
|
- package-lock.json
|
|
- .github/workflows/package-lock-lint.yml
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
# This allows a subsequently queued workflow run to interrupt previous runs
|
|
concurrency:
|
|
group: '${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}'
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
lint:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Check out repo
|
|
uses: actions/checkout@dcd71f646680f2efd8db4afa5ad64fdcba30e748
|
|
|
|
- name: Setup Node
|
|
uses: actions/setup-node@1f8c6b94b26d0feae1e387ca63ccbdc44d27b561
|
|
with:
|
|
node-version: 16.14.x
|
|
|
|
- name: Run check
|
|
run: |
|
|
npm --version
|
|
|
|
# From https://docs.npmjs.com/cli/v7/commands/npm-install
|
|
#
|
|
# The --package-lock-only argument will only update the
|
|
# package-lock.json, instead of checking node_modules and
|
|
# downloading dependencies.
|
|
#
|
|
npm install --package-lock-only --ignore-scripts --include=optional
|
|
|
|
# If the package.json (dependencies and devDependencies) is
|
|
# in correct sync with package-lock.json running the above command
|
|
# should *not* make an edit to the package-lock.json. I.e.
|
|
# running `git status` should
|
|
# say "nothing to commit, working tree clean".
|
|
git diff --exit-code
|