I often search my dependencies on the internet to see if there are any updates.
This could be a time-consuming task in a large project. Also, we wouldn’t know which dependencies have updates unless we check all of them one by one.

Luckily there is a Gradle plugin that can check our dependency updates for us:
https://github.com/ben-manes/gradle-versions-plugin.

In this section, we will set up the plugin. Here is how to set it up:

Add it to project level build.gradle:

plugins {
    id("com.github.ben-manes.versions") version "0.38.0"
}

Then we can configure it like this inside project level build.gradle:

import com.github.benmanes.gradle.versions.updates.DependencyUpdatesTask
import com.github.benmanes.gradle.versions.updates.gradle.GradleReleaseChannel
tasks.named<DependencyUpdatesTask>("dependencyUpdates").configure {
    checkForGradleUpdate = true
    gradleReleaseChannel = GradleReleaseChannel.RELEASE_CANDIDATE.id
    revision = "integration" // See available revisions
    outputFormatter = "plain" // xml and json available too
    outputDir = "build/dependencyUpdates"
    reportfileName = "dependency_update_report"
}

Then run the ./gradlew dependencyUpdates task. The plugin will create a file named dependency_update_report.txt under build/dependencyUpdates directory after completed successfully.

Here is an example file:

To run it manually do the following: Go to Actions tab -> Click to workflow name -> Click to Run workflow

2. Schedule: This means it will run automatically with the given cron input. In our workflow, we are using 37 13 * * SAT cron configuration. It means our workflow will run at every Saturday 13:37 UTC. (Note that Github Actions can have delays, do not expect an exact time here)

Note: You can validate your cron by pasting it on the crontab.guru page.

In this section, we will send the email:

Our workflow sends the email if it runs scheduled. We can see that in the Send email report step. We will use the github-script action to send the email. This action is a node.js preinstalled Docker container and can run javascript codes.

We will create dependency-update-report-mail-sender.js javascript file under .github/scripts folder. In this script, we will use nodemailer to send the email:

Github encrypts our secrets and they do not appear in logs. I am using one of my weird high school emails. It doesn’t need to be an actively used email account, we are using it just to send the email.

Here is the automated email that sent from Github: