(chore) Add auto-update for OpenMRS dependencies

Author: ibacher

.github/workflows/ci.yml

@@ -23,7 +23,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '18'
+          node-version: "20"
 
       - name: Cache dependencies
         id: cache
@@ -59,13 +59,14 @@ jobs:
   pre_release:
     runs-on: ubuntu-latest
     needs: build
-    if: ${{ github.event_name == 'push' }}
+    if: ${{ github.event_name == 'push' }} && github.repository_owner == 'openmrs'
+
     steps:
       - uses: actions/checkout@v4
       - name: 🛠️ Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "18"
+          node-version: "20"
 
       - name: 💾 Cache dependencies
         id: cache
@@ -108,10 +109,8 @@ jobs:
 
   release:
     runs-on: ubuntu-latest
-
     needs: build
-
-    if: ${{ github.event_name == 'release' }}
+    if: ${{ github.event_name == 'release' }} && github.repository_owner == 'openmrs'
 
     steps:
       - uses: actions/checkout@v4
@@ -120,7 +119,7 @@ jobs:
       - name: 🛠️ Use Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "18"
+          node-version: "20"
 
       - name: 💾 Cache dependencies
         id: cache

.github/workflows/update-openmrs-deps.yml

@@ -0,0 +1,55 @@
+on:
+  workflow_dispatch:
+  schedule:
+    # every hour
+    - cron: '30 * * * *'
+
+name: 'Check for OpenMRS Dependency Updates'
+
+jobs:
+  check-for-updates:
+    name: Check for updates to OpenMRS libraries
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+    if: github.repository_owner == 'openmrs'
+
+    steps:
+      - uses: actions/checkout@v4
+      - name: 🟢 Use Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - name: 💾 Cache dependencies
+        id: cache
+        uses: actions/cache@v4
+        with:
+          path: '**/node_modules'
+          key: ${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}
+      - name: 📦 Install dependencies
+        if: steps.cache.outputs.cache-hit != 'true'
+        run: yarn install --immutable
+      - name: ✅ Check for updates
+        run: node ./tools/update-openmrs-deps.mjs
+      - name: ⬆️ Create PR if necessary
+        id: cpr
+        uses: peter-evans/create-pull-request@v7
+        with:
+          commit-message: '(chore) Update OpenMRS dependencies'
+          title: '(chore) Update OpenMRS dependencies'
+          body: |
+            Update OpenMRS dependencies
+          branch: 'chore/update-openmrs-deps'
+          author: 'OpenMRS Bot <infrastructure@openmrs.org>'
+          token: ${{ secrets.OMRS_BOT_GH_TOKEN }}
+      - name: ✅ Auto approve PR
+        if: steps.cpr.outputs.pull-request-operation == 'created' || steps.cpr.outputs.pull-request-operation == 'updated'
+        run: gh pr review --approve "${{ steps.cpr.outputs.pull-request-number }}"
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: 🔀 Automerge PR
+        if: steps.cpr.outputs.pull-request-operation == 'created' || steps.cpr.outputs.pull-request-operation == 'updated'
+        run: gh pr merge --auto --squash "${{ steps.cpr.outputs.pull-request-number }}"
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

tools/update-openmrs-deps.mjs

@@ -0,0 +1,43 @@
+import { execSync } from 'node:child_process';
+
+try {
+  // NB for other places use '@openmrs/*@next'; here we want to ignore patient-common-lib
+  execSync(`yarn up --fixed '@openmrs/*@next' 'openmrs@next'`, {
+    stdio: ['ignore', 'inherit', 'inherit'],
+    windowsHide: true,
+  });
+} catch (error) {
+  console.error(`Error while updating dependencies: ${error.message ?? error}`);
+  process.exit(1);
+}
+
+try {
+  execSync(`yarn dedupe`, {
+    stdio: ['ignore', 'inherit', 'inherit'],
+    windowsHide: true,
+  });
+} catch (error) {
+  console.error(`Error while deduplicating dependencies: ${error.message ?? error}`);
+  process.exit(1);
+}
+
+try {
+  execSync(`git diff-index --quiet HEAD --`, {
+    stdio: 'ignore',
+    windowsHide: true,
+  });
+  process.exit(0);
+} catch (error) {
+  // git diff-index --quite HEAD --
+  // exits with status 1 if there are changes; we only need to run yarn verify if there are changes
+}
+
+try {
+  execSync(`yarn verify`, {
+    stdio: ['ignore', 'inherit', 'inherit'],
+    windowsHide: true,
+  });
+} catch (error) {
+  console.error(`Error while running yarn verify: ${error.message ?? error}. Updates require manual intervention.`);
+  process.exit(1);
+}