NAME

repomatic sync-workflow-pins - Bump npm, PyPI and release-tag literals in workflow YAML

SYNOPSIS

repomatic sync-workflow-pins [OPTIONS]

DESCRIPTION

Bump npm, PyPI and release-tag version literals embedded in workflow YAML.

Scans workflow and composite-action files for `npm install pkg@x`,
`npx pkg@x`, `uvx 'pkg==x'` and `--with 'pkg==x'` pins, the tag of
`gh release download vX --repo owner/repo`, and the uv `version:` input of
`astral-sh/setup-uv`. Resolves each to its latest release passing the
[tool.repomatic] minimum-release-age cooldown, and rewrites the literal.

OPTIONS

-o / --output FILE: Write a markdown report (version table) to this file.
--output-format [markdown|github-actions]: Format of the --output file. github-actions writes step outputs, for $GITHUB_OUTPUT.
--release-notes / --no-release-notes: Fetch release notes from GitHub (markdown, appended after the table).
--held-back / --no-held-back: Report newer releases withheld by the minimum-release-age cooldown.
--help / -h: Show this message and exit.

ENVIRONMENT

SYNC_WORKFLOW_PINS_OUTPUT: Write a markdown report (version table) to this file.
SYNC_WORKFLOW_PINS_OUTPUT_FORMAT: Format of the --output file. github-actions writes step outputs, for $GITHUB_OUTPUT.
SYNC_WORKFLOW_PINS_RELEASE_NOTES: Fetch release notes from GitHub (markdown, appended after the table).
SYNC_WORKFLOW_PINS_HELD_BACK: Report newer releases withheld by the minimum-release-age cooldown.
SYNC_WORKFLOW_PINS__CLICK_DEFAULT_HELP: Show this message and exit.

EXIT STATUS

0: Success.
1: A runtime error, an aborted prompt (Ctrl-D), or a declined confirmation.
2: A usage error: unknown option, invalid value, missing operand, or an unparsable configuration file.
130: Interrupted with Ctrl-C: the process ends by SIGINT, reported as 130.

EXAMPLES

Bump every workflow version literal past the cooldown

repomatic sync\-workflow\-pins

AUTHORS

Kevin Deldycke