From 67d1e6602aafca6586849e090803c63748798ec6 Mon Sep 17 00:00:00 2001 From: sinlov Date: Sun, 12 May 2024 18:00:08 +0800 Subject: [PATCH] ci(action): add auto-merge-dependabot.yml --- .github/workflows/auto-merge-dependabot.yml | 32 +++++++++++++++++++++ 1 file changed, 32 insertions(+) create mode 100644 .github/workflows/auto-merge-dependabot.yml diff --git a/.github/workflows/auto-merge-dependabot.yml b/.github/workflows/auto-merge-dependabot.yml new file mode 100644 index 0000000..6b187c9 --- /dev/null +++ b/.github/workflows/auto-merge-dependabot.yml @@ -0,0 +1,32 @@ +## more doc see +# https://docs.github.com/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions#approve-a-pull-request + +name: auto merge dependabot +on: pull_request + +permissions: + contents: write + pull-requests: write + repository-projects: write + +jobs: + dependabot: + runs-on: ubuntu-latest + if: github.actor == 'dependabot[bot]' + steps: + - name: Dependabot metadata + id: metadata + uses: dependabot/fetch-metadata@v2 + with: + github-token: "${{ secrets.GITHUB_TOKEN }}" + + - name: Enable auto-merge for Dependabot PRs + # Automatically merge the following dependency upgrades: + # https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#ignore + if: steps.metadata.outputs.update-type == 'version-update:semver-minor' || steps.metadata.outputs.update-type == 'version-update:semver-patch' + run: | + gh pr edit "$PR_URL" --add-label "dependencies" + gh pr merge --auto --merge '${{ github.event.pull_request.html_url }}' + env: + PR_URL: ${{github.event.pull_request.html_url}} + GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}} \ No newline at end of file