update cpanfile.snapshow updating

Author: haarg

.github/workflows/update-snapshot.yml

@@ -9,58 +9,24 @@ jobs:
     container:
       image: perl:5.22-buster
     steps:
-      - name: install jq
-        run: |
-          apt-get update && apt-get install -y jq
       - name: Generate Auth Token
-        id: auth-token
-        uses: jamestrousdale/github-app-jwt-token@0.1.4
+        uses: actions/create-github-app-token@v2
+        id: app-token
         with:
           app-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
-      - id: git-user
-        name: Set up git user
-        uses: haarg/setup-git-user@v1
-        with:
-          jwt: ${{ steps.auth-token.outputs.jwt }}
       - uses: actions/checkout@v4
         with:
-          token: ${{ steps.auth-token.outputs.access-token }}
-      - name: Set up installation local::lib
-        run: |
-          mkdir -p $RUNNER_TEMP/perl5/bin
-          mkdir -p $RUNNER_TEMP/perl5/lib/perl5
-          echo "$RUNNER_TEMP/perl5/bin" >> "$GITHUB_PATH"
-          echo "PERL5LIB=$RUNNER_TEMP/perl5/lib/perl5" >> "$GITHUB_ENV"
-      - name: Get cpm
-        run: |
-          curl -sL -o $RUNNER_TEMP/perl5/bin/cpm https://raw.githubusercontent.com/skaji/cpm/main/cpm
-          chmod +x $RUNNER_TEMP/perl5/bin/cpm
-      - name: Install Carton and Carton::Snapshot
-        run: >
-          cpm install
-          Carton
-          Carton::Snapshot
-          --without-test
-          --show-build-log-on-failure
-          --local-lib-contained=$RUNNER_TEMP/perl5
-      - name: Install deps
-        run: >
-          cpm install
-          --cpanfile cpanfile
-          --resolver metacpan
-          --show-build-log-on-failure
-          --local-lib-contained=local
-      - name: Maybe update cpanfile.snapshot
-        run: carton
+          token: ${{ steps.app-token.outputs.token }}
+      - name: Update cpanfile.snapshot
+        uses: metacpan/metacpan-actions/update-snapshot@master
       - name: Create Pull Request
         uses: peter-evans/create-pull-request@v7
         with:
-          token: ${{ steps.auth-token.outputs.access-token }}
+          token: ${{ steps.app-token.outputs.token }}
           commit-message: Update cpanfile.snapshot
           title: Update cpanfile.snapshot
-          author: ${{ steps.git-user.outputs.user-full }}
-          committer: ${{ steps.git-user.outputs.user-full }}
+          sign-commits: true
           body: |
             [GitHub Action Run](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }})
           branch: update-cpanfile-snapshot

cpanfile

@@ -135,30 +135,32 @@ requires 'XML::XPath';
 requires 'YAML::XS', '0.83'; # Mojolicious::Plugin::OpenAPI YAML loading
 
 # test requirements
-requires 'Code::TidyAll', '0.82';
-requires 'Code::TidyAll::Plugin::UniqueLines';
-requires 'CPAN::Faker', '0.011';
-requires 'Devel::Confess';
-requires 'HTTP::Cookies', '6.10';
-requires 'MetaCPAN::Client', '2.029000';
-requires 'Module::Faker', '== 0.017';
-requires 'Module::Faker::Dist', '== 0.017';
-requires 'OrePAN2', '0.48';
-requires 'Parallel::ForkManager' => '2.02';
-requires 'Perl::Critic', '0.140';
-requires 'Perl::Tidy' => '== 20240511';
-requires 'PPI', '1.274'; # Perl::Critic
-requires 'PPIx::QuoteLike', '0.022'; # Perl::Critic
-requires 'PPIx::Regexp', '0.085'; # Perl::Critic
-requires 'String::Format', '1.18'; # Perl::Critic
-requires 'Test::Deep';
-requires 'Test::Fatal';
-requires 'Test::Harness', '3.44'; # Contains App::Prove
-requires 'Test::More', '1.302190';
-requires 'Test::Perl::Critic', '1.04';
-requires 'Test::RequiresInternet';
-requires 'Test::Routine', '0.012';
-requires 'Test::Vars', '0.015';
+on test => sub {
+    requires 'CPAN::Faker', '0.011';
+    requires 'Devel::Confess';
+    requires 'HTTP::Cookies', '6.10';
+    requires 'MetaCPAN::Client', '2.029000';
+    requires 'Module::Faker', '== 0.017';
+    requires 'Module::Faker::Dist', '== 0.017';
+    requires 'OrePAN2', '0.48';
+    requires 'Test::Deep';
+    requires 'Test::Fatal';
+    requires 'Test::Harness', '3.44'; # Contains App::Prove
+    requires 'Test::More', '1.302190';
+    requires 'Test::RequiresInternet';
+    requires 'Test::Routine', '0.012';
+    requires 'Test::Vars', '0.015';
+};
 
 # author requirements
-requires 'App::perlimports';
+on develop => sub {
+    requires 'App::perlimports';
+    requires 'Code::TidyAll::Plugin::UniqueLines';
+    requires 'Code::TidyAll', '0.82';
+    requires 'Perl::Critic', '0.140';
+    requires 'Perl::Tidy' => '== 20240511';
+    requires 'PPI', '1.274'; # Perl::Critic
+    requires 'PPIx::QuoteLike', '0.022'; # Perl::Critic
+    requires 'PPIx::Regexp', '0.085'; # Perl::Critic
+    requires 'String::Format', '1.18'; # Perl::Critic
+};

cpanfile.forced

@@ -0,0 +1,12 @@
+# transitive deps
+# Not used directly, but they need to be explicitly listed to ensure they are
+# in our cpanfile.snapshot at appropriate versions. Either for older perl
+# versions, or unpredictable dynamic deps. These will be installed using a
+# different process to ensure they are present in the snapshot, even if they
+# would be satisfied by core.
+requires 'CPAN::Meta', '2.141520';
+requires 'Devel::PPPort', '3.62';   # for older perls
+requires 'ExtUtils::MakeMaker', '7.76';
+requires 'version', '0.9929';       # for older perls
+requires 'Module::Signature', '0.90';
+requires 'Pod::Parser', '1.67';     # for newer perls