feat(upgrade): Create a github action to yarn upgrade

Author: christopherthielen

actions/upgrade/Dockerfile

@@ -0,0 +1,7 @@
+FROM node:12
+
+COPY package.json /package.json
+RUN yarn
+COPY entrypoint.sh /entrypoint.sh
+COPY upgrade.js /upgrade.js
+ENTRYPOINT ["/entrypoint.sh"]

actions/upgrade/action.yml

@@ -0,0 +1,24 @@
+name: 'Upgrade dependencies'
+description: 'Upgrade dependencies'
+inputs:
+  deptype:
+    description: 'dependencies or devDependencies'
+    required: true
+    default: 'dependencies'
+  exclude:
+    description: 'packages to exclude'
+    required: false
+  latest:
+    description: 'if `true`, uses yarn upgrade --latest'
+    required: true
+    default: 'false'
+outputs:
+  upgrades: # id of output
+    description: 'The packages@versions that were updated'
+runs:
+  using: 'docker'
+  image: 'Dockerfile'
+  args:
+    - ${{ inputs.deptype }}
+    - ${{ inputs.exclude }}
+    - ${{ inputs.latest }}

actions/upgrade/entrypoint.sh

@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+
+/upgrade.js

actions/upgrade/package.json

@@ -0,0 +1,8 @@
+{
+  "name": "upgrade",
+  "private": true,
+  "version": "1.0.0",
+  "dependencies": {
+    "@yarnpkg/lockfile": "^1.1.0"
+  }
+}

actions/upgrade/upgrade.js

@@ -0,0 +1,57 @@
+#!/usr/bin/env node
+const fs = require("fs");
+const childProcess = require("child_process");
+const lockfile = require("@yarnpkg/lockfile");
+
+// dependencies or devDependencies
+const depType = process.env.INPUT_DEPTYPE || "dependencies";
+const exclude = (process.env.INPUT_EXCLUDE || "").split("s*,s*").filter(x=>x);
+const latest = process.env.INPUT_LATEST === 'true' ? " --latest" : "";
+console.log({ depType, exclude, latest });
+
+function getDeclaredDeps() {
+  const pkg = JSON.parse(fs.readFileSync("package.json").toString());
+  return (depObject = pkg[depType] || {});
+}
+
+function getResolvedDeps() {
+  const file = fs.readFileSync("yarn.lock", "utf8");
+  const lockJson = lockfile.parse(file);
+  return lockJson.object;
+}
+
+console.log({ declared: getDeclaredDeps() });
+const packages = Object.keys(getDeclaredDeps()).filter(
+  (pkg) => !exclude.includes(pkg)
+);
+
+function getResolvedSemverMapping() {
+  const declaredDeps = getDeclaredDeps();
+  const resolvedDeps = getResolvedDeps();
+  return packages.reduce((acc, pkg) => {
+    const declared = declaredDeps[pkg];
+    const semver = `${pkg}@${declaredDeps[pkg]}`;
+    const resolved = resolvedDeps[semver].version;
+    acc[pkg] = { declared, resolved };
+    return acc;
+  }, {});
+}
+
+const before = getResolvedSemverMapping();
+
+const cmd = `yarn upgrade ${packages.join(" ")} ${latest}`;
+console.log(cmd);
+childProcess.execSync(`${cmd}`, { stdio: "inherit" });
+
+const after = getResolvedSemverMapping();
+
+const changed = packages.filter(
+  (pkg) => before[pkg].resolved !== after[pkg].resolved
+);
+
+const upgrades = changed
+  .map((pkg) => `${pkg}@${after[pkg].resolved}`)
+  .join(" ");
+
+childProcess.execSync(`git status`, { stdio: "inherit" });
+console.log(`::set-output name=upgrades::${upgrades}`);