yarn-deduplicate.yml

name: yarn-deduplicate

on:
  pull_request:
    paths:
      - "yarn.lock"

# This allows a subsequently queued workflow run to interrupt previous runs
concurrency:
  group: '${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}'
  cancel-in-progress: true

permissions:
  contents: write
  deployments: read
  pull-requests: write # needed to write comment in PR

jobs:
  dedupe:
    runs-on: ubuntu-latest
    name: Deduplicate
    environment: pull_request_unsafe

    steps:
      - name: Checkout sources
        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 #v4.1.0
        with:
          persist-credentials: false # otherwise, the token used is the GITHUB_TOKEN, instead of your personal token
          fetch-depth: 0 # otherwise, you will failed to push refs to dest repo

      - name: Use Node.js
        uses: ./.github/actions/setup-node

      - name: yarn-deduplicate
        id: deduplicate
        run: |
          yarn
          yarn yarn-deduplicate
          echo "::set-output name=diff::$(git status --short yarn.lock)"

      - name: Commit dedupe
        if: steps.deduplicate.outputs.diff
        uses: actions-js/push@156f2b10c3aa000c44dbe75ea7018f32ae999772 #1.4
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}
          message: "chore: yarn-deduplicate"
          branch: ${{ github.head_ref }}