main.yml

# This is a basic workflow to help you get started with Actions

name: update dependencies

# Controls when the workflow will run
on:

  schedule:
    # * is a special character in YAML so you have to quote this string
    - cron:  '0 1 * * 2'

  # Allows you to run this workflow manually from the Actions tab
  workflow_dispatch:

# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:
  # This workflow contains a single job called "build"
  build:
    # The type of runner that the job will run on
    runs-on: ubuntu-latest

    # Steps represent a sequence of tasks that will be executed as part of the job
    steps:
      # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
      - uses: actions/checkout@v3
          
      - uses: actions/setup-node@v3
        with:
          node-version: '14'
      - name: update
        run: npm install && npm update && npm audit fix
        
      - name: commit files
        run: |
          git config --local user.email "action@github.com"
          git config --local user.name "GitHub Action"
          git config pull.rebase false
          git add -A
          git commit -m "update dependencies" || echo "No changes to commit"

      # Runs a set of commands using the runners shell
      - name: push changes
        uses: ad-m/github-push-action@v0.6.0
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}
          branch: main