Features

• Report actions with updates.
• Exclude action names by regex.
• Sets outputs with results.
• Comment on PR with results table.
• Customize table columns and order.
• Post results open or collapsed.
• Set the comment heading text.
• Post results to Job Summary.

Planned

• Exclude action files by name.

Request a Feature

Please help us by submitting a feature request.

Related

Want to check outdated npm packages on a pull? cssnr/npm-outdated-action
Want to show package changes on release notes? cssnr/package-changelog-action
Want to automatically updated tags on release? cssnr/update-version-tags-action

PR Comment

If run on a release event, the Release Notes are automatically updated with the results unless you set update_release to false. You can customize the heading or remove it by specifying an empty string.

View PR Comment

---

Scanned 8 workflows, checked 13 actions and found 6 updates.

Results

Name	File	Breaking	Latest
cssnr/check-build-action	check-build.yaml	-	v1.1.0
cssnr/label-creator-action	labeler.yaml	-	v1.0.2
cssnr/mirror-repository-action	mirror.yaml	-	v1.2.0
cssnr/update-version-tags-action	release.yaml	-	v1.3.1
cssnr/package-changelog-action	release.yaml	⚠️	v2.0.0
cssnr/update-version-tags-action	tags.yaml	-	v1.3.1

npx actions-up --exclude "actions/.*" --yes

Job Summary

Unless disabled, a Job Summary is generated to capture the command, output and errors.

View Job Summary

---

PR Comment: #25

---

Scanned 8 workflows, checked 13 actions and found 6 updates.

Results

Name	File	Breaking	Latest
cssnr/check-build-action	check-build.yaml	-	v1.1.0
cssnr/label-creator-action	labeler.yaml	-	v1.0.2
cssnr/mirror-repository-action	mirror.yaml	-	v1.2.0
cssnr/update-version-tags-action	release.yaml	-	v1.3.1
cssnr/package-changelog-action	release.yaml	⚠️	v2.0.0
cssnr/update-version-tags-action	tags.yaml	-	v1.3.1

---

Actions

[
  {
    "type": "external",
    "name": "cssnr/check-build-action",
    "version": "v1",
    "file": "/home/runner/work/js-test-action/js-test-action/.github/workflows/check-build.yaml",
    "line": 48
  },
  {
    "type": "external",
    "name": "cssnr/label-creator-action",
    "version": "v1",
    "file": "/home/runner/work/js-test-action/js-test-action/.github/workflows/labeler.yaml",
    "line": 40
  },
  {
    "type": "external",
    "name": "ataylorme/eslint-annotate-action",
    "version": "d57a1193d4c59cbfbf3f86c271f42612f9dbd9e9",
    "file": "/home/runner/work/js-test-action/js-test-action/.github/workflows/lint.yaml",
    "line": 86
  },
  {
    "type": "external",
    "name": "cssnr/mirror-repository-action",
    "version": "v1",
    "file": "/home/runner/work/js-test-action/js-test-action/.github/workflows/mirror.yaml",
    "line": 26
  },
  {
    "type": "external",
    "name": "cssnr/npm-outdated-action",
    "version": "master",
    "file": "/home/runner/work/js-test-action/js-test-action/.github/workflows/pull.yaml",
    "line": 44
  },
  {
    "type": "external",
    "name": "cssnr/actions-up-action",
    "version": "master",
    "file": "/home/runner/work/js-test-action/js-test-action/.github/workflows/pull.yaml",
    "line": 48
  },
  {
    "type": "external",
    "name": "cssnr/update-version-tags-action",
    "version": "v1",
    "file": "/home/runner/work/js-test-action/js-test-action/.github/workflows/release.yaml",
    "line": 19
  },
  {
    "type": "external",
    "name": "smashedr/update-release-notes-action",
    "version": "master",
    "file": "/home/runner/work/js-test-action/js-test-action/.github/workflows/release.yaml",
    "line": 29
  },
  {
    "type": "external",
    "name": "cssnr/package-changelog-action",
    "version": "v1",
    "file": "/home/runner/work/js-test-action/js-test-action/.github/workflows/release.yaml",
    "line": 36
  },
  {
    "type": "external",
    "name": "sarisia/actions-status-discord",
    "version": "11a0bfe3b50977e38aa2bd4a4ebd296415e83c19",
    "file": "/home/runner/work/js-test-action/js-test-action/.github/workflows/release.yaml",
    "line": 40
  },
  {
    "type": "external",
    "name": "cssnr/update-version-tags-action",
    "version": "v1",
    "file": "/home/runner/work/js-test-action/js-test-action/.github/workflows/tags.yaml",
    "line": 21
  },
  {
    "name": "./",
    "type": "local",
    "file": "/home/runner/work/js-test-action/js-test-action/.github/workflows/test.yaml",
    "line": 55
  },
  {
    "type": "external",
    "name": "sarisia/actions-status-discord",
    "version": "11a0bfe3b50977e38aa2bd4a4ebd296415e83c19",
    "file": "/home/runner/work/js-test-action/js-test-action/.github/workflows/test.yaml",
    "line": 69
  }
]

Updates

[
  {
    "currentVersion": "v1",
    "latestVersion": "v1.1.0",
    "isBreaking": false,
    "latestSha": "b31a53ea9332664a79d0a84755de7bf2ff8cbd42",
    "hasUpdate": true,
    "action": {
      "type": "external",
      "name": "cssnr/check-build-action",
      "version": "v1",
      "file": "/home/runner/work/js-test-action/js-test-action/.github/workflows/check-build.yaml",
      "line": 48
    }
  },
  {
    "currentVersion": "v1",
    "latestVersion": "v1.0.2",
    "isBreaking": false,
    "latestSha": "fc7d9fa6a9e27c561a2bb802a9d2a8f21682279d",
    "hasUpdate": true,
    "action": {
      "type": "external",
      "name": "cssnr/label-creator-action",
      "version": "v1",
      "file": "/home/runner/work/js-test-action/js-test-action/.github/workflows/labeler.yaml",
      "line": 40
    }
  },
  {
    "currentVersion": "v1",
    "latestVersion": "v1.2.0",
    "isBreaking": false,
    "latestSha": "2af5bf347684245f52b5f56502956a57f9b8813e",
    "hasUpdate": true,
    "action": {
      "type": "external",
      "name": "cssnr/mirror-repository-action",
      "version": "v1",
      "file": "/home/runner/work/js-test-action/js-test-action/.github/workflows/mirror.yaml",
      "line": 26
    }
  },
  {
    "currentVersion": "v1",
    "latestVersion": "v1.3.1",
    "isBreaking": false,
    "latestSha": "06ac3e56e828129c17054b39d11317584af1bd88",
    "hasUpdate": true,
    "action": {
      "type": "external",
      "name": "cssnr/update-version-tags-action",
      "version": "v1",
      "file": "/home/runner/work/js-test-action/js-test-action/.github/workflows/release.yaml",
      "line": 19
    }
  },
  {
    "currentVersion": "v1",
    "latestVersion": "v2.0.0",
    "isBreaking": true,
    "latestSha": "3fe5182f279f89ada632b35b7f2ed281a4b84e39",
    "hasUpdate": true,
    "action": {
      "type": "external",
      "name": "cssnr/package-changelog-action",
      "version": "v1",
      "file": "/home/runner/work/js-test-action/js-test-action/.github/workflows/release.yaml",
      "line": 36
    }
  },
  {
    "currentVersion": "v1",
    "latestVersion": "v1.3.1",
    "isBreaking": false,
    "latestSha": "06ac3e56e828129c17054b39d11317584af1bd88",
    "hasUpdate": true,
    "action": {
      "type": "external",
      "name": "cssnr/update-version-tags-action",
      "version": "v1",
      "file": "/home/runner/work/js-test-action/js-test-action/.github/workflows/tags.yaml",
      "line": 21
    }
  }
]

Inputs

path: '.'
heading: '### Actions Up'
open: true
columns: ['n', 'f', 'b', 'l']
exclude: 'actions/.*'
fail: false
summary: true

You can view an actual workflow run from the Test job on GitHub (requires login).

Rolling Tags

The following rolling tags are maintained to improve stability across updates.

Version Tag	Rolling	Bugs	Feat.	Name	Target	Example
	✅	✅	✅	Major	vN.x.x	vN
	✅	✅	❌	Minor	vN.N.x	vN.N
	❌	❌	❌	Micro	vN.N.N	vN.N.N

You can view the release notes for each version on the releases page.

The Major tag is recommended. It is the most up-to-date and always backwards compatible. Breaking changes would result in a Major version bump. At a minimum you should use a Minor tag.

Tags Security Notice

As shown above, tags are mutable; however, commit hashes are not. Therefore, if security is your top priority, you should pin your actions to a specific commit hash.

• GitHub Documentation
• Article by StepSecurity