dependabot

Author: frenchy64

.github/dependabot.yml

@@ -0,0 +1,15 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "maven"
+    directory: "/dependabot"
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/workflows/build.yml

@@ -42,6 +42,10 @@ jobs:
         uses: DeLaGuardo/setup-clojure@master
         with:
           lein: latest
+      - name: Setup Babashka
+        run: bash < <(curl -s https://raw.githubusercontent.com/babashka/babashka/master/install)
+      - name: Check dependabot is in sync with project.clj
+        run: ./script/check-dependabot
       - name: Run tests
         run: lein do clean, all test, all check
   deploy:

scripts/check-dependabot

@@ -0,0 +1,16 @@
+#!/bin/bash
+# Check that project.clj is in sync with the committed dependabot pom.xml.
+
+set -e
+
+./script/sync-dependabot
+set +e
+if git diff --ignore-all-space --exit-code dependabot/pom.xml ; then
+  echo 'project.clj and dependabot/pom.xml are in sync.'
+  exit 0
+else
+  echo
+  echo 'project.clj and dependabot/pom.xml are out of sync! Please run ./script/sync-dependabot locally and commit the results.'
+  echo 'If this is a PR from dependabot, you must manually update the version in project.clj'
+  exit 1
+fi

scripts/sync-dependabot

@@ -0,0 +1,11 @@
+#!/bin/bash
+
+set -e
+
+SHA=$(git rev-parse HEAD)
+
+lein pom
+mkdir -p dependabot
+mv pom.xml dependabot
+# lein pom uses the origin git remote to add metadata. remove for reproducibility.
+bb '(spit "dependabot/pom.xml" (-> "dependabot/pom.xml" slurp xml/parse-str (update :content (partial remove #(some-> % :tag name #{"scm" "url"}))) xml/emit-str))'