.github/workflows/audit-bulk.yaml

on:
  workflow_dispatch:
  schedule:
    # every Monday morning
    - cron: '0 1 * * 1'
name: npm-audit-bulk
jobs:
  updatePackages:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
        with:
          fetch-depth: 0
      - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
        with:
          node-version: 18
      - run: npm run run -- npm audit fix
        continue-on-error: true
      - uses: googleapis/code-suggester@589b3ac11ac2575fd561afa45034907f301a375b # v4
        env:
          ACCESS_TOKEN: ${{ secrets.YOSHI_CODE_BOT_TOKEN }}
        with:
          command: pr
          upstream_owner: googleapis
          upstream_repo: repo-automation-bots
          description: 'ran `npm audit fix`'
          title: 'chore: update lock files'
          message: 'chore: update lock files'
          branch: update-lock-file-all
          primary: main
          force: true
          git_dir: '.'