action-dependabot-automerge.yml 750 B

123456789101112131415161718192021222324252627
  1. name: Dependabot auto-merge
  2. on: pull_request
  3. permissions:
  4. contents: write
  5. pull-requests: write
  6. jobs:
  7. dependabot:
  8. runs-on: ubuntu-latest
  9. if: github.actor == 'dependabot[bot]'
  10. steps:
  11. - name: Fetch dependabot metadata
  12. id: metadata
  13. uses: dependabot/fetch-metadata@v2
  14. with:
  15. github-token: "${{ secrets.GITHUB_TOKEN }}"
  16. - name: Approve and enable auto-merge for minor/patch updates
  17. if: steps.metadata.outputs.update-type != 'version-update:semver-major'
  18. env:
  19. PR_URL: ${{ github.event.pull_request.html_url }}
  20. GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
  21. run: |
  22. gh pr review --approve "$PR_URL"
  23. gh pr merge --auto --squash "$PR_URL"