dependency-review-action icon indicating copy to clipboard operation
dependency-review-action copied to clipboard

Print `Dependency Changes` in PR comment

Open wzieba opened this issue 6 months ago • 0 comments

Is your feature request related to a problem? Please describe. When changing a dependency, I'd like to be informed via PR comment about all the changes that are actually happening in the dependency graph.

The build system I use has a complex logic for resolving transitive dependencies, so I can't always tell what side-effects are applied whenever a dependency is updated.

Describe the solution you'd like When change in a dependency graph is detected, add a (opt-in?) section to the PR's comment with all changes. This is actually implemented in the action's output (below), my request would be only to append this section to PR's comment.

image

Describe alternatives you've considered

  • I thought about intercepting action's output log and filtering Dependency Changes section, but I couldn't find a way to interepct the output in the end
  • I could use JSON from outputs.dependency-changes, but this requires playing with jq and maintain a parsing logic

Additional context The build system I use is Gradle, I use dependency-submission action: https://github.com/gradle/actions/tree/main/dependency-submission

wzieba avatar Aug 13 '24 15:08 wzieba