Generate license.json via GitHub Actions after deps updates (#38)

Author: mattfsourcecode

.github/workflows/general-ci.yml

@@ -1,9 +1,13 @@
 name: General CI Workflow
 
 on:
+  push:
+    branches:
+      - "**"
+
   pull_request:
     branches:
-      - master
+      - "**"
 
 jobs:
   test-and-build:
@@ -32,3 +36,20 @@ jobs:
 
       - name: Build the project
         run: pnpm build
+
+      - name: Trigger Update Licenses Workflow
+        env:
+          PERSONAL_ACCESS_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
+        run: |
+          echo "Triggering Update Licenses Workflow for branch: ${{ github.ref_name }}"
+          RESPONSE=$(curl -s -o /dev/null -w "%{http_code}" -X POST \
+            -H "Authorization: token ${PERSONAL_ACCESS_TOKEN}" \
+            -H "Accept: application/vnd.github.v3+json" \
+            https://api.github.com/repos/${{ github.repository }}/dispatches \
+            -d '{"event_type": "trigger-update-licenses", "client_payload": {"branch": "${{ github.ref_name }}"}}')
+
+          echo "Dispatch Event Response: $RESPONSE"
+          if [ "$RESPONSE" -ne 204 ]; then
+            echo "Failed to trigger the workflow"
+            exit 1
+          fi

.github/workflows/update-licenses.yml

@@ -0,0 +1,91 @@
+name: Update Licenses on Dependency Changes
+
+on:
+  push:
+    branches:
+      - "**"
+  pull_request:
+    branches:
+      - "**"
+
+permissions:
+  contents: write
+  pull-requests: write
+  actions: write
+
+jobs:
+  update-licenses:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0 # Fetch all history for proper branch tracking
+
+      - name: Set up pnpm
+        uses: pnpm/action-setup@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "lts/*"
+          cache: pnpm
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Generate licenses.json
+        run: |
+          pnpm add -g license-checker
+          license-checker --json > licenses.json
+
+      - name: Display licenses.json content
+        run: cat licenses.json
+
+      - name: Commit and Push Updated Licenses
+        env:
+          PERSONAL_ACCESS_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
+        run: |
+          git config --global user.name "github-actions[bot]"
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+
+          BRANCH_NAME="${GITHUB_HEAD_REF:-${GITHUB_REF_NAME:-$(git rev-parse --abbrev-ref HEAD)}}"
+          echo "Working on branch: $BRANCH_NAME"
+
+          # Fetch latest changes from the remote repository
+          git fetch origin $BRANCH_NAME
+
+          # Ensure we are on the correct branch
+          git checkout -B $BRANCH_NAME origin/$BRANCH_NAME
+
+          # Reset any local changes to match remote branch
+          git reset --hard origin/$BRANCH_NAME
+
+          # Stage the updated licenses.json
+          git add licenses.json
+
+          if ! git diff --cached --quiet; then
+            git commit -m "chore: Update licenses.json"
+
+            # Explicitly set upstream branch to avoid stale refs
+            git branch --set-upstream-to=origin/$BRANCH_NAME
+
+            # Force push with lease (safe force push)
+            git push --force-with-lease https://x-access-token:${PERSONAL_ACCESS_TOKEN}@github.com/${{ github.repository }} HEAD:$BRANCH_NAME
+          else
+            echo "No changes to commit."
+          fi
+
+      - name: Verify Commit
+        run: git log -n 3 --oneline
+
+      - name: Trigger test-and-build Workflow
+        env:
+          PERSONAL_ACCESS_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
+        run: |
+          curl -X POST \
+            -H "Authorization: token ${PERSONAL_ACCESS_TOKEN}" \
+            -H "Accept: application/vnd.github.v3+json" \
+            https://api.github.com/repos/${{ github.repository }}/dispatches \
+            -d '{"event_type": "trigger-test-and-build"}'

package.json

@@ -23,7 +23,7 @@
     "@swc/core": "^1.10.12",
     "@swc/helpers": "^0.5.15",
     "@types/jest": "^29.5.14",
-    "@types/node": "^22.12.0",
+    "@types/node": "^22.13.0",
     "jest": "^29.7.0",
     "nodemon": "^3.1.9",
     "rimraf": "^6.0.1",