|
# Enable auto-merge for Dependabot PRs for minor and patch |
|
# Based off of https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions#enable-auto-merge-on-a-pull-request |
|
name: Dependabot auto-merge |
|
on: pull_request |
|
|
|
permissions: |
|
contents: read |
|
|
|
jobs: |
|
dependabot: |
|
runs-on: ubuntu-latest |
|
if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'FortnoxAB/changesets-java' |
|
permissions: |
|
contents: write |
|
pull-requests: write |
|
steps: |
|
- name: Harden the runner (Audit all outbound calls) |
|
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 |
|
with: |
|
egress-policy: audit |
|
|
|
- name: Dependabot metadata |
|
id: metadata |
|
uses: dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98 # v3.1.0 |
|
with: |
|
github-token: "${{ secrets.GITHUB_TOKEN }}" |
|
- name: Enable auto-merge for Dependabot PRs |
|
if: steps.metadata.outputs.update-type == 'version-update:semver-minor' || steps.metadata.outputs.update-type == 'version-update:semver-patch' |
|
run: gh pr merge --auto --merge "$PR_URL" |
|
env: |
|
PR_URL: ${{github.event.pull_request.html_url}} |
|
GH_TOKEN: ${{secrets.GITHUB_TOKEN}} |