Create update-package-lock.yml

.github/workflows/update-package-lock.yml

@@ -0,0 +1,53 @@
+name: Update package-lock.json
+
+on:
+  schedule:
+    # This is probably 6am UTC, which is 10pm PST or 11pm PDT
+    # Alternatively, 6am local is also fine
+    - cron: '0 6 * * *'
+  workflow_dispatch: {}
+
+permissions:
+  contents: read
+
+# Ensure scripts are run with pipefail. See:
+# https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#exit-codes-and-error-action-preference
+defaults:
+  run:
+    shell: bash
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    if: github.repository == 'wsargent-emcins/file-reader-action'
+
+    steps:
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
+        with:
+          token: ${{ secrets.TS_BOT_GITHUB_TOKEN }}
+      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
+        with:
+          node-version: '*'
+          check-latest: true
+      - run: |
+          npm --version
+          # corepack enable npm
+          npm install -g $(jq -r '.packageManager' < package.json)
+          npm --version
+
+      - name: Update package-lock.json and push
+        run: |
+          rm package-lock.json
+          npm install
+
+          if git diff --exit-code --name-only package-lock.json; then
+            echo "No change."
+          else
+            npm test
+            npx hereby LKG
+            git config user.email "[email protected]"
+            git config user.name "TypeScript Bot"
+            git add -f package-lock.json
+            git commit -m "Update package-lock.json"
+            git push
+          fi