ci(ga): add dpes verifucation for PRs

Author: gund

.github/workflows/dependencies.yml

@@ -0,0 +1,35 @@
+name: 'Dependencies'
+
+on:
+  # Triggers the workflow on pull request events
+  pull_request:
+  # Allows you to run this workflow manually from the Actions tab
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  review:
+    runs-on: ubuntu-latest
+    name: Review
+    steps:
+      - uses: actions/checkout@v3
+      - name: Dependencies Review
+        uses: actions/dependency-review-action@v2
+  # FIXME: This validation does not work on CI
+  # verify:
+  #   runs-on: ubuntu-latest
+  #   name: Verify
+  #   steps:
+  #     - uses: actions/setup-node@v3
+  #     - uses: actions/checkout@v3
+  #     - name: Update Cache
+  #       run: npm run update-deps
+  #     - name: Verify Deps
+  #       run: |
+  #         if [[ $(npm run verify-deps) ]]; then
+  #           echo "Dependencies content has changed! Update dependencies via 'npm run update-deps' and commit changes!"
+  #           npm run verify-deps
+  #           exit 1
+  #         fi

.github/workflows/dependency-review.yml

@@ -1,10 +1,12 @@
 {
   "name": "root",
   "version": "0.0.0",
-  "packageManager": "npm@18.0.0",
+  "packageManager": "npm@9.3.1",
   "private": true,
   "scripts": {
     "ct": "git-cz",
+    "update-deps": "rm -rf node_modules && rm -rf npm_cache && npm i",
+    "verify-deps": "git diff --name-only | grep npm_cache/_cacache/content",
     "start": "nx serve ng-dynamic-component",
     "build": "nx build ng-dynamic-component",
     "test": "nx test ng-dynamic-component",