Simek/yarn-lock-changes

A GitHub action to report dependency changes and potential problems

Compares composer.lock changes and generates Markdown report so you can use it in PR description.

ꙮ Review dependencies changes to prevent supply chain attack

Extract information about the dependencies being updated by a Dependabot-generated PR.

Fail CI when dependencies in your lockfile lose npm provenance or trusted publisher status

Finally see what's changed when you do npm update. Changelog generates a changelog for npm modules and github repos.

🤖 Dependabot's core logic for creating update PRs.

Conditionally run actions based on files modified by PR, feature branch or pushed commits