Lock a 3rd party lib across multiple repos

lock_lib.sh

#! /bin/bash
# Assumptions: jq, and github cli are installed. One version of node/npm used across all repos 

set -ex

touch faker.prs.txt

for f in $(find . -name package.json -depth 2 -exec grep -l "faker" {} + )
do
  cd $(dirname $f)
  git checkout -b lock_faker origin/master
  git pull
  cat package.json | jq '.devDependencies.faker = "5.5.3"' > tmp.json && mv tmp.json package.json
  npm install && npm dedupe
  git commit -am "lock faker.js"
  git push
  gh pr create --fill
  gh pr list -H $(git branch --show-current) --json url -q '.[0].url'>> ../faker.prs.txt
  cd ..
done