MokoConsulting/MokoCLI
Public Access
1
0
Fork 0
Code Issues 1 Pull Requests Releases 8 Wiki Activity

feat: cross-repo dependency update automation (#149) #290

Merged
jmiller merged 2 commits from feature/149-dependency-update-automation into main 2026-06-21 02:46:48 +00:00
Conversation 0 Commits 2 Files Changed 38
+671 -37
jmiller commented 2026-06-21 02:45:30 +00:00
Owner
Copy Link
Copy Source

Summary

Add deps:update command that scans org repos for outdated Composer/npm dependencies, creates PRs with changelogs, and optionally auto-merges safe patch updates.

  • Composer: composer outdated --format=json, updates targeted packages
  • npm: npm outdated --json, updates targeted packages
  • Skips repos with existing deps PRs (no duplicates)
  • Checkpoint-based resumability with --resume
  • --patch-only for safe updates, --auto-merge for patch PRs
  • Supports --repos and --exclude filters

Test plan

  • php -l automation/update_dependencies.php passes
  • php bin/moko list shows deps:update
  • --dry-run scans repos and reports outdated deps without creating PRs
  • PR body includes dependency table with current/latest versions

Closes #149

## Summary Add `deps:update` command that scans org repos for outdated Composer/npm dependencies, creates PRs with changelogs, and optionally auto-merges safe patch updates. - Composer: `composer outdated --format=json`, updates targeted packages - npm: `npm outdated --json`, updates targeted packages - Skips repos with existing deps PRs (no duplicates) - Checkpoint-based resumability with `--resume` - `--patch-only` for safe updates, `--auto-merge` for patch PRs - Supports `--repos` and `--exclude` filters ## Test plan - [ ] `php -l automation/update_dependencies.php` passes - [ ] `php bin/moko list` shows `deps:update` - [ ] `--dry-run` scans repos and reports outdated deps without creating PRs - [ ] PR body includes dependency table with current/latest versions Closes #149
jmiller added 2 commits 2026-06-21 02:45:31 +00:00
feat: cross-repo dependency update automation (#149)
Universal: Auto Version Bump / Version Bump (push) Successful in 9s
Details
0d3b14d55c 
Add `deps:update` command that scans org repos for outdated Composer/npm
dependencies, creates PRs with changelogs, and optionally auto-merges
safe patch updates.

- Composer: runs `composer outdated --format=json`, updates targeted packages
- npm: runs `npm outdated --json`, updates targeted packages
- Skips repos with existing deps PRs (no duplicates)
- Checkpoint-based resumability with --resume
- --patch-only for safe updates, --auto-merge for patch PRs
- Supports --repos and --exclude filters
chore(version): auto-bump patch 09.33.01-dev [skip ci]
RC Revert / Rename rc/ back to dev/ (pull_request) Has been skipped
Details
Branch Cleanup / Delete merged branch (pull_request) Successful in 1s
Details
Universal: Build & Release / Promote to RC (pull_request) Has been skipped
Details
Universal: Workflow Sync Trigger / Sync workflows to live repos (pull_request) Failing after 3s
Details
Universal: Build & Release / Build & Release Pipeline (pull_request) Successful in 19s
Details
109493ab4a
jmiller merged commit f325de91d4 into main 2026-06-21 02:46:48 +00:00
jmiller deleted branch feature/149-dependency-update-automation 2026-06-21 02:46:49 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
automation
Automated processes or scripts
 breaking-change
Breaking API or functionality change
 build
Build system changes
 ci-cd
CI/CD pipeline changes
 config
Configuration file changes
 css
CSS/styling changes
 dependencies
Dependency updates
 deploy-failure
Automated deploy failure tracking
 docker
Docker configuration changes
 documentation
Documentation changes
 dolibarr
Dolibarr module or extension
 generic
Generic project or library
 good first issue
Good for newcomers
 health-check
Repository health check results
 health: excellent
Health score 90-100
 health: fair
Health score 50-69
 health: good
Health score 70-89
 health: poor
Health score below 50
 help wanted
Extra attention needed
 html
HTML template changes
 javascript
JavaScript code changes
 joomla
Joomla extension or component
 mokostandards
MokoStandards compliance
 needs-review
Awaiting code review
 php
PHP code changes
 push-failure
File push failure requiring attention
 python
Python code changes
 security
Security-related changes
 size/l
Large change (101-300 lines)
 size/m
Medium change (31-100 lines)
 size/s
Small change (11-30 lines)
 size/xl
Extra large change (301-1000 lines)
 size/xs
Extra small change (1-10 lines)
 size/xxl
Extremely large change (1000+ lines)
 standards-drift
Repository drifted from MokoStandards
 standards-update
MokoStandards sync update
 sync-failure
Bulk sync failure requiring attention
 sync-report
Bulk sync run report
 template-validation-failure
Template workflow validation failure
 tests
Test suite changes
 type: bug
Something isn't working
 type: chore
Maintenance tasks
 type: enhancement
Enhancement to existing feature
 type: feature
New feature or request
 type: refactor
Code refactoring
 type: version
Version-related change
 typescript
TypeScript code changes
 version
Version bump or release
 version-drift
Version mismatch detected
 work-in-progress
Work in progress, not ready for merge
No labels
Priority -
Type -
Milestone
No items
No Milestone
Assignees
Clear assignees
jmiller (Jonathan Miller)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: MokoConsulting/MokoCLI#290
Delete Branch "feature/149-dependency-update-automation"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?