micronaut-logging/.github/workflows/dependabot.yaml
dependabot[bot] c5ad5a824b
Bump dependabot/fetch-metadata from 1.1.1 to 1.2.1 (#38)
Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) from 1.1.1 to 1.2.1.
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](https://github.com/dependabot/fetch-metadata/compare/v1.1.1...v1.2.1)

---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-01 13:12:41 +00:00

22 lines
741 B
YAML

name: Dependabot
"on": pull_request_target
jobs:
auto-merge:
runs-on: ubuntu-latest
if: ${{ github.actor == 'dependabot[bot]' }}
steps:
- uses: dependabot/fetch-metadata@v1.2.1
id: metadata
with:
github-token: "${{ secrets.GIT_ACTION_TOKEN }}"
- run: gh pr review --approve "$PR_URL"
if: ${{ steps.dependabot-metadata.outputs.update-type != 'version-update:semver-major' }}
env:
PR_URL: ${{github.event.pull_request.html_url}}
GITHUB_TOKEN: ${{ secrets.GIT_ACTION_TOKEN }}
- run: gh pr merge --auto --squash "$PR_URL"
env:
PR_URL: ${{github.event.pull_request.html_url}}
GITHUB_TOKEN: ${{ secrets.GIT_ACTION_TOKEN }}