Features
- Automatically parse differences between package-lock.json changes between releases.
- Sorts into sections: Added, Upgraded, Downgraded, Removed, Unknown, Unchanged.
- Option to customize sections visibility and sections order.
- Option to customize columns visibility and columns order.
- Option to display results expanded or collapsed.
- Outputs changes in JSON and markdown.
Planned
- Work on Pull Requests
- Work on Workflow Dispatch
- Custom Column Alignment
- Custom Column Titles
- Custom Section Icons
- Custom Section Text
Table Options
These are the available table Sections and Columns.
| Name | ❔ | Operation | Before | After |
|---|---|---|---|---|
| @added | 🆕 | Added | current | |
| @upgrade | ✅ | Upgraded | previous | current |
| @downgraded | ⚠️ | Downgraded | previous | current |
| @removed | ⛔ | Removed | previous | |
| @unknown | ❓ | Unknown | previous | current |
| @unchanged | 🔘 | Unchanged | previous | current |
Table Example
This is an example table.
Click Here to View Changes
Changes for: package-lock.json
| Package Name | ❔ | Before | After |
|---|---|---|---|
| @eslint/config-helpers | 🆕 | 0.1.0 | |
| @eslint-community/eslint-utils | ✅ | 4.4.1 | 4.5.1 |
| @eslint/core | ✅ | 0.11.0 | 0.12.0 |
| @eslint/eslintrc | ✅ | 3.2.0 | 3.3.0 |
| @eslint/js | ✅ | 9.20.0 | 9.22.0 |
| @eslint/plugin-kit | ✅ | 0.2.5 | 0.2.7 |
| @humanwhocodes/retry | ✅ | 0.4.1 | 0.4.2 |
| @octokit/endpoint | ✅ | 9.0.5 | 9.0.6 |
| @octokit/graphql | ✅ | 7.1.0 | 7.1.1 |
| @octokit/plugin-paginate-rest | ✅ | 9.2.1 | 9.2.2 |
| @octokit/request | ✅ | 8.4.0 | 8.4.1 |
| @octokit/request-error | ✅ | 5.1.0 | 5.1.1 |
| acorn | ✅ | 8.14.0 | 8.14.1 |
| eslint | ✅ | 9.20.1 | 9.22.0 |
| eslint-scope | ✅ | 8.2.0 | 8.3.0 |
| flatted | ✅ | 3.3.2 | 3.3.3 |
| prettier | ✅ | 3.5.0 | 3.5.3 |
| @eslint/plugin-kit/node_modules/@eslint/core | ⛔ | 0.10.0 |
Rolling Tags
The following rolling tags are maintained to improve stability across updates.
| Version Tag | Rolling | Bugs | Feat. | Name | Target | Example |
|---|---|---|---|---|---|---|
 | ✅ | ✅ | ✅ | Major | vN.x.x | vN |
 | ✅ | ✅ | ❌ | Minor | vN.N.x | vN.N |
 | ❌ | ❌ | ❌ | Micro | vN.N.N | vN.N.N |
You can view the release notes for each version on the releases page.
The Major tag is recommended. It is the most up-to-date and always backwards compatible. Breaking changes would result in a Major version bump. At a minimum you should use a Minor tag.
Tags Security Notice
As shown above, tags are mutable; however, commit hashes are not. Therefore, if security is your top priority, you should pin your actions to a specific commit hash.
Updating Actions
If you prefer to manually update actions, then azat-io/actions-up was created to allow you to easily and securely do this using an interactive CLI with optional excludes.
I also created cssnr/actions-up-action that will run this for you automatically and generate a markdown table for pull requests.
View Example Markdown Table
Scanned 8 workflows, checked 12 actions and found 6 updates.Results
| Name | File | Breaking | Latest |
|---|---|---|---|
| cssnr/check-build-action | check-build.yaml | - | v1.1.0 |
| cssnr/label-creator-action | labeler.yaml | - | v1.0.2 |
| cssnr/mirror-repository-action | mirror.yaml | - | v1.2.0 |
| cssnr/update-version-tags-action | release.yaml | - | v1.3.1 |
| cssnr/package-changelog-action | release.yaml | ⚠️ | v2.0.0 |
| cssnr/update-version-tags-action | tags.yaml | - | v1.3.1 |