Use reusable armada workflow for frontend deps

Author: aeshub

.github/workflows/monthly_npm_dependency_update.yml

@@ -5,46 +5,17 @@ on:
     - cron: "0 8 1 * *" # 08:00 UTC on the 1st of every month
   workflow_dispatch:
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
-  npm-update:
-    runs-on: ubuntu-latest
+  update:
     permissions:
       contents: write
       pull-requests: write
-    defaults:
-      run:
-        working-directory: frontend
-    steps:
-      - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6
-        with:
-          persist-credentials: false
-
-      - name: Setup Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f #v6
-        with:
-          node-version: 24
-          cache: npm
-          cache-dependency-path: frontend/package-lock.json
-
-      - name: Update npm to support minimumReleaseAge
-        run: npm install -g npm@11.10.0
-
-      - name: Update npm packages
-        run: npm update
-
-      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 #v8
-        with:
-          commit-message: "GHA: Monthly npm dependency update"
-          title: Monthly npm dependency update
-          body: |
-            - Monthly update of npm dependencies
-            - Only packages released more than 7 days ago are included (enforced via `min-release-age=7` in `.npmrc`)
-
-            Auto-generated by [create-pull-request][1]
-
-            [1]: https://github.com/peter-evans/create-pull-request
-          branch: monthly-npm-dependency-update
-          labels: automated-pr
-          delete-branch: true
+    uses: equinor/armada/.github/workflows/npm_dependency_update_and_create_pr.yml@main
+    with:
+      working-directory: frontend
+      node-version: "24"
+      operation: update

.github/workflows/upgrade_package_lock_and_create_PR.yml

@@ -6,46 +6,19 @@ on:
       - main
 
   schedule:
-    # https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows
-    # In a public repository, scheduled workflows are automatically disabled when no
-    # repository activity has occurred in 60 days
     - cron: "5 6 * * 1-5" # At 06:05 on every day-of-week from Monday through Friday
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
-  npm-audit-fix:
-    runs-on: ubuntu-latest
+  audit-fix:
     permissions:
       contents: write
       pull-requests: write
-    defaults:
-      run:
-        working-directory: frontend
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6
-
-      - name: Setup Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f #v6
-        with:
-          node-version: 24
-          cache: npm
-          cache-dependency-path: frontend/package-lock.json
-
-      - name: Update vulnerable node packages
-        run: |
-          npm audit fix
-
-      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 #v8
-        with:
-          commit-message: "GHA: Update vulnerable node dependencies"
-          title: Update vulnerable node dependencies
-          body: |
-            - Dependency node updates
-
-            Auto-generated by [create-pull-request][1]
-
-            [1]: https://github.com/peter-evans/create-pull-request
-          branch: update-node-dependencies
-          labels: automated-pr
-          delete-branch: true
+    uses: equinor/armada/.github/workflows/npm_dependency_update_and_create_pr.yml@main
+    with:
+      working-directory: frontend
+      node-version: "24"
+      operation: audit-fix