check-workflow

Check GHA For Dependency Updates

$ CheckWorkflow sco1 check-workflow
lint_test.yml
+-------------+-------------------------+---------------------------+-----------+--------+
|     Job     |        Step Name        |           Action          | Specified | Latest |
+-------------+-------------------------+---------------------------+-----------+--------+
|     lint    |           None          |      actions/checkout     |   ~=4.0   | 5.0.0  |
|     test    |           None          |      actions/checkout     |   ~=4.0   | 5.0.0  |
| combine-cov |           None          |      actions/checkout     |   ~=4.0   | 5.0.0  |
| combine-cov | Pull workflow artifacts | actions/download-artifact |   ~=4.0   | 5.0.0  |
+-------------+-------------------------+---------------------------+-----------+--------+

release.yml
+-------+-----------+------------------+-----------+--------+
|  Job  | Step Name |      Action      | Specified | Latest |
+-------+-----------+------------------+-----------+--------+
| build |    None   | actions/checkout |   ~=4.0   | 5.0.0  |
+-------+-----------+------------------+-----------+--------+

Installation

Since this is mainly intended as a personal helper, I do not intend to deploy this project to PyPI. Wheels are built in CI for each released version.

Alternatively, you can use a tool like uv or pipx to run or install this project as a standalone tool, e.g.:

$ uvx --from git+https://github.com/sco1/[email protected] CheckWorkflow --help
usage: CheckWorkflow [-h] {local,remote} ...

positional arguments:
  {local,remote}
    local         Query local project
    remote        Query remote repository

options:
  -h, --help      show this help message and exit

Usage

Manual reports can be generated using the CheckWorkflow CLI for either a local or remote project.

Local

$ CheckWorkflow local --help
usage: CheckWorkflow local [-h] [-r ROOT] [-m]

options:
  -h, --help            show this help message and exit
  -r ROOT, --root ROOT  Workflow root (default: ./.github/workflows/)
  -m, --markdown        Format report as markdown (default: False)

Remote

$ CheckWorkflow remote --help
usage: CheckWorkflow remote [-h] [-b BRANCH] [-r ROOT] [-m] org repo

positional arguments:
  org                   Query repository parent
  repo                  Query repository

options:
  -h, --help            show this help message and exit
  -b BRANCH, --branch BRANCH
                        Query branch (default: main)
  -r ROOT, --root ROOT  Workflow root (default: .github/workflows/)
  -m, --markdown        Format report as markdown (default: False)

Why Don't You Just Use Dependabot?

Because I don't want to! 😊

The idea initially came because Dependabot for a very long time did not support grouping PRs, which led to a ton of noise that I didn't particularly care for. Though it was eventually added, workflow updates aren't something I need to constantly be pinged on to take care of; it's sufficient for my needs to bump them while I'm bumping or adjusting other things.

Also it's fun to solve problems on my own.