Add support to update skills.sh

[juancarlosjr97]

Tell us more.

Hello,

Have we considered adding a skills.sh automated dependencies via Renovate?

Thank you!

[github-actions[bot]]

Hi there,

You're asking us to support a new package manager. We need to know some basic information about this package manager first. Please copy/paste the new package manager questionnaire, and fill it out in full.

Once the questionnaire is filled out we'll decide if we want to support this new manager.

Good luck,

The Renovate team

[jamietanna]

What would this look like? Can you point to an example of using skills.sh?

[juancarlosjr97]

Thanks @jamietanna!

How it would look exactly, I am not 100% sure yet, but I think there is something worth considering here.

skills.sh behaves a lot like a "package" that you execute as a CLI tool, and it is starting to get more popular. Even though it is still early days, one thing that will matter quickly is keeping it up to date.

The project (https://github.com/vercel-labs/skills) includes an update command that could potentially be wrapped by Renovate. It does require Node.js to run.

Right now I have a workflow I created for updating it, but I would love to manage this with Renovate instead. My thought was to implement this via a custom datasource (I am planning to attempt that), but having something built-in or generally available in Renovate would likely be better so everyone can use it out of the box.

If this is something you would consider, I am happy to share what I have built so far or help test or prototype an approach.

[jamietanna]

That would be useful - I'm primarily trying to understand what this would look like for users (mainly what the setup looks like without Renovate)

[juancarlosjr97]

This is what I built, which is a workflow, to raise MRs, but to my surprise, it is actually skills.sk CLI has a bug vercel-labs/skills#484 so it does not work right now :(

Now, I created this project to show how skills.sh works.

But this would be the expected output

npx skils check

Checking for skill updates...

Checking 1 skill(s) for updates...

1 update(s) available:

  ↑ i18n-localization
    source: sickn33/antigravity-awesome-skills

Run npx skills update to update all skills

And then npx skills update it will update them.

Checking for skill updates...

Found 1 update(s)

Updating i18n-localization...
  ✓ Updated i18n-localization

✓ Updated 1 skill(s)

I think one aspect is that skills do not add the version to the lock file; that might be a new thing to request, but they are not doing it right now, just the hash.

I am not sure how we could work this out, honestly, we are missing stuff from the outputs.

[jamietanna]

@rckim77 has also shared some info in #41861 (comment)

[jamietanna]

Do we know how that hash is calculated, for Renovate to update it?