FR: add bolt-project.yaml support

[jay7x]

It'd be nice to have bolt-project.yaml support as a module list source.
Modules are specified under modules key and may have one of formats described here:
https://www.puppet.com/docs/bolt/latest/bolt_installing_modules.html

[jordanbreen28]

Hey @jay7x, thanks for raising this feature request, I really like this idea!

Just looking some more clarification on the actual requirements for implementing this..
So in your bolt-project.yaml you can specify loose version requirements such as >= 4.0.0 < 6.0.0, which means that I presume these are the module versions you want dependencies checked against.

As the main functionality of the dependency_checker is too check that the module is up to date with the most recent releases of each of the modules dependencies, if we were to check modules in a bolt-project which did not allow for their most recent of releases, the likelihood is the module would contain outdated dependencies and this wouldn't be fixable other than updating the version_requirement, which may be detrimental to the decision of setting those explicit version requirements in the first place.

So I suppose what I'm asking is, is the idea to iterate through each module in a given bolt-project.yaml and check the most recent version on the forge/github against its dependencies? Or if i'm missing the point completely do let me know 💯

[jay7x]

So I suppose what I'm asking is, is the idea to iterate through each module in a given bolt-project.yaml and check the most recent version on the forge/github against its dependencies?

IIRC yes, that was my idea when I created the issue here.. I.e. I'd like to keep all the dependencies up-to-date in the same way as you do for metadata.json now.

Though as a Bolt project looks similar to a control repo, it might be better to use a tool which checks the Puppetfile for latest module versions instead 🤔 But ideally I'd say it should be the same tool as the task is the same - to check if modules used in a Bolt project/a control repo/a module are up-to-date.