[FR] Support updating used action references within composite actions

[webknjaz]

So the composite actions are pretty simple. They have a steps key that pretty much resembles the job steps key in workflow definitions: https://docs.github.com/en/actions/sharing-automations/creating-actions/creating-a-composite-action#creating-an-action-metadata-file

These actions can be in their own repos (like other distributable action types) and have a file called action.yml in repo roots.

There's also an unofficial convention to have local in-repo actions in subdirectories of .github/actions/, with their own action.yml files. I think it's technically possible to put these anywhere so it might make sense to have some configuration for such action paths. Perhaps, those local actions referenced from the workflow definitions could be auto-discovered.

I imagine one would need to extend https://github.com/davidism/gha-update/blob/b752b98/src/gha_update/_core.py#L48-L53 to handle this case.

[edgarrmondragon]

Just ran into this. Maybe a configurable composite_actions_paths with [".github/actions/"] as default?

# pyproject.toml
[tool.gha-update]
composite_actions_paths = [".github/actions/", "another/location"]

or like @webknjaz mentioned, composite actions could be auto-discovered in

gha-update/src/gha_update/_core.py

Line 75 in b752b98

if not uses or uses.startswith("./") or uses.startswith("docker://"):

instead of ignored. Though I think there are a lot of edge cases, like directory trees that are checked out but don't exist locally, etc.