Composer Dependency Auto Update
A Tipsy PHP webhook service that automatically bumps specified Composer dependencies and commits an updated composer.lock whenever their upstream master branches change; Heroku-deployable with a secret key. v1.0 released December 2015.
- BPM
- 187
- GRADE
- S
- LEVEL
- 9
- RELEASES
- 2
- YEARS
- 2015–2026
Automagicly Update
With Tipsy and half a dozen of my projects depending on it, every change I made to the framework meant going into each project, running composer update, and committing the new composer.lock. I got tired of that.
So in December 2015 I wrote a webhook service, built on Tipsy, that watches the master branches of the dependencies you name and, when one changes, updates the lock file and commits it for you. I called it automagicly, spelled exactly like that. Setup was five steps: deploy it somewhere (Heroku, probably), add a webhook on the dependency pointing at it, match the secret key to the one you deployed with, then add GITHUB_REPO2, GITHUB_REPO3 and so on for as many projects as you want. Credentials went in the URL, which is how we did it in 2015.
v1.0.0 went out the day I started and v1.0.1 the day after. It was basically my own little Dependabot, a couple of years before Dependabot was around.
led to
- sem2026automated dependency bumps and commits