2022-10-03 09:39:31 +02:00
|
|
|
name: Auto-merge Dependabot JS
|
|
|
|
on: pull_request_target
|
|
|
|
|
|
|
|
permissions:
|
|
|
|
pull-requests: write
|
|
|
|
contents: write
|
|
|
|
|
|
|
|
jobs:
|
|
|
|
dependabot:
|
|
|
|
runs-on: ubuntu-latest
|
|
|
|
if: ${{ github.actor == 'dependabot[bot]' }}
|
|
|
|
steps:
|
|
|
|
- name: Dependabot metadata
|
|
|
|
id: metadata
|
2023-07-03 04:28:14 +02:00
|
|
|
uses: dependabot/fetch-metadata@v1.6.0
|
2022-10-03 09:39:31 +02:00
|
|
|
with:
|
|
|
|
github-token: '${{ secrets.GITHUB_TOKEN }}'
|
|
|
|
- name: Approve and merge minor updates
|
|
|
|
if: ${{ steps.metadata.outputs.package-ecosystem == 'npm_and_yarn' && (steps.metadata.outputs.update-type == 'version-update:semver-minor' || steps.metadata.outputs.update-type == 'version-update:semver-patch') }}
|
|
|
|
run: |
|
|
|
|
gh pr review --approve "$PR_URL"
|
|
|
|
gh pr merge --auto --merge "$PR_URL"
|
|
|
|
env:
|
|
|
|
PR_URL: ${{ github.event.pull_request.html_url }}
|
|
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|