Notify dependabot of a new version of a private npm module

notify-dependabot.sh

#!/bin/bash

# this script requires curl, jq, and npm to be available in the PATH
# it also requires a github access token (with org read access) to be in ~/.dependabotrc.json in
# this form:
# {"github_token":"<token>"}

if [[ "$#" -lt 1 ]]; then
  echo "usage: $0 <package_name>" >&2
  exit 1
fi

package="$1"
version="$(npm info "$package" version)"

echo "using $package@$version"

token="$(jq -r .github_token ~/.dependabotrc.json)"
payload="$(jq -n --arg package "$package" --arg version "$version" '{"name":$package,"version":$version,"package-manager":"npm_and_yarn"}')"

curl -i -H 'content-type: application/json' -H "authorization: Personal $token" -d "$payload" https://api.dependabot.com/release_notifications/private; echo