From c354cd416f5781265e6e2c0c93e55ad231f9ac92 Mon Sep 17 00:00:00 2001 From: jeet Date: Wed, 7 Feb 2024 09:41:48 -0500 Subject: [PATCH] Add Dependabot Automerge --- .github/dependabot-automerge.yml | 35 ++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 .github/dependabot-automerge.yml diff --git a/.github/dependabot-automerge.yml b/.github/dependabot-automerge.yml new file mode 100644 index 00000000..cb3cb7de --- /dev/null +++ b/.github/dependabot-automerge.yml @@ -0,0 +1,35 @@ +name: Dependabot auto-merge +on: pull_request + +permissions: + contents: write + pull-requests: write + +jobs: + dependabot: + runs-on: ubuntu-latest + # Checking the actor will prevent your Action run failing on non-Dependabot + # PRs but also ensures that it only does work for Dependabot PRs. + if: ${{ github.actor == 'dependabot[bot]' }} + steps: + # This first step will fail if there's no metadata and so the approval + # will not occur. + - name: Dependabot metadata + id: dependabot-metadata + uses: dependabot/fetch-metadata@v1.1.1 + with: + github-token: "${{ secrets.GHACTIONS_TOKEN }}" + # Here the PR gets approved. + - name: Approve a PR + run: gh pr review --approve "$PR_URL" + env: + PR_URL: ${{ github.event.pull_request.html_url }} + GITHUB_TOKEN: ${{ secrets.GHACTIONS_TOKEN }} + # Finally, this sets the PR to allow auto-merging for patch and minor + # updates if all checks pass + - name: Enable auto-merge for Dependabot PRs + if: ${{ steps.dependabot-metadata.outputs.update-type != 'version-update:semver-major' }} + run: gh pr merge --auto --squash "$PR_URL" + env: + PR_URL: ${{ github.event.pull_request.html_url }} + GITHUB_TOKEN: ${{ secrets.GHACTIONS_TOKEN }} \ No newline at end of file