From aabec591c2f4231be37250f6d1a76f2805305db7 Mon Sep 17 00:00:00 2001
From: Dave Lockhart <dlockhart@users.noreply.github.com>
Date: Tue, 6 Jun 2023 14:27:36 -0400
Subject: [PATCH] add update-package-lock workflow (#4)

---
 .github/CODEOWNERS                        |  1 +
 .github/workflows/update-package-lock.yml | 25 +++++++++++++++++++++++
 2 files changed, 26 insertions(+)
 create mode 100644 .github/workflows/update-package-lock.yml

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index cf94d91b..bafd67de 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -1 +1,2 @@
 *       @BrightspaceUI/gaudi-dev
+package-lock.json
diff --git a/.github/workflows/update-package-lock.yml b/.github/workflows/update-package-lock.yml
new file mode 100644
index 00000000..ce57041f
--- /dev/null
+++ b/.github/workflows/update-package-lock.yml
@@ -0,0 +1,25 @@
+name: Update package-lock.json
+on:
+  schedule:
+    - cron: "30 12 * * 1-5" # Mon-Fri 8:30AM EDT. 7:30AM EST.
+  workflow_dispatch: # manual trigger
+jobs:
+  update:
+    name: Update
+    timeout-minutes: 10
+    runs-on: ubuntu-latest
+    steps:
+      - uses: Brightspace/third-party-actions@actions/checkout
+        with:
+          token: ${{ secrets.PR_GITHUB_TOKEN }}
+      - uses: Brightspace/third-party-actions@actions/setup-node
+        with:
+          node-version-file: .nvmrc
+          cache: 'npm'
+      - name: Update package-lock.json
+        uses: BrightspaceUI/actions/update-package-lock@main
+        with:
+          AUTO_MERGE_METHOD: squash
+          AUTO_MERGE_TOKEN: ${{ secrets.PR_GITHUB_TOKEN }}        
+          APPROVAL_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.PR_GITHUB_TOKEN }}