...
1name: Dependabot auto-merge
2on: pull_request
3
4permissions:
5 contents: write
6 pull-requests: write
7
8jobs:
9 dependabot:
10 runs-on: ubuntu-latest
11 if: ${{ github.actor == 'dependabot[bot]' }}
12 steps:
13 - name: Dependabot metadata
14 id: metadata
15 uses: dependabot/fetch-metadata@c9c4182bf1b97f5224aee3906fd373f6b61b4526 # v1.6.0
16 with:
17 github-token: "${{ secrets.GITHUB_TOKEN }}"
18 - name: Enable auto-merge for Dependabot PRs
19 if: ${{steps.metadata.outputs.update-type == 'version-update:semver-minor' || steps.metadata.outputs.update-type == 'version-update:semver-patch'}}
20 run: gh pr merge --auto --merge "$PR_URL"
21 env:
22 PR_URL: ${{github.event.pull_request.html_url}}
23 GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
View as plain text