dependency-review-action
dependency-review-action copied to clipboard
Print `Dependency Changes` in PR comment
Is your feature request related to a problem? Please describe. When changing a dependency, I'd like to be informed via PR comment about all the changes that are actually happening in the dependency graph.
The build system I use has a complex logic for resolving transitive dependencies, so I can't always tell what side-effects are applied whenever a dependency is updated.
Describe the solution you'd like When change in a dependency graph is detected, add a (opt-in?) section to the PR's comment with all changes. This is actually implemented in the action's output (below), my request would be only to append this section to PR's comment.
Describe alternatives you've considered
- I thought about intercepting action's output log and filtering
Dependency Changes
section, but I couldn't find a way to interepct the output in the end - I could use JSON from
outputs.dependency-changes
, but this requires playing withjq
and maintain a parsing logic
Additional context
The build system I use is Gradle, I use dependency-submission
action: https://github.com/gradle/actions/tree/main/dependency-submission