Have a way to automatically update .js when Renovate thinks it's best

.github/workflows/test-js.yml

@@ -0,0 +1,68 @@
+---
+name: Update test/*.js (or similar)
+
+"on":
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - "*"
+  workflow_dispatch: {}
+  merge_group:
+
+concurrency:
+  group: ${{github.workflow}}-${{github.ref}}
+  cancel-in-progress: true
+
+jobs:
+  branch:
+    outputs:
+      head_ref: ${{steps.branch.outputs.head_ref}}
+
+    runs-on: ubuntu-24.04
+
+    steps:
+      - id: branch
+        run: |
+          head_ref=${GITHUB_HEAD_REF}
+          echo "head_ref is ${head_ref}"
+          echo "head_ref=${head_ref}" > "${GITHUB_OUTPUT}"
+
+  update:
+    name: Update priv/static/assets/js
+
+    needs: [branch]
+
+    if: endsWith(needs.branch.outputs.head_ref, 'package.json-+-.nvmrc-deps')
+
+    runs-on: ubuntu-24.04
+
+    steps:
+      - uses: actions/create-github-app-token@31c86eb3b33c9b601a1f60f98dcbfd1d70f379b4 # v1.10.3
+        id: app-token
+        with:
+          app-id: ${{vars.ARIZONA_BOT_APP_ID}}
+          private-key: ${{secrets.ARIZONA_BOT_PRIVATE_KEY}}
+
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        with:
+          token: ${{steps.app-token.outputs.token}}
+          ref: ${{needs.branch.outputs.head_ref}}
+
+      - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3
+        with:
+          node-version-file: .nvmrc
+
+      - run: |
+          npm run format-lint
+          if ! git diff --exit-code >/dev/null; then
+              # there's stuff to push
+              git config user.name "arizona[bot]"
+              git config user.email "arizona_bot_@user.noreply.github.com"
+              git add priv/static/assets/js/*
+              git commit -m "[automation] update \`test/*.js\` (or similar) after Renovate"
+              git push
+          fi
+        env:
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}