File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 1+ # To get started with Dependabot version updates, you'll need to specify which
2+ # package ecosystems to update and where the package manifests are located.
3+ # Please see the documentation for all configuration options:
4+ # https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
5+
6+ version : 2
7+ updates :
8+ - package-ecosystem : " github-actions"
9+ directory : " /" # Location of package manifests
10+ schedule :
11+ interval : " weekly"
Original file line number Diff line number Diff line change 1+ ## Summary
2+ <!-- Describe why you made changes and the changes, including screenshots if necessary. What did you do with this pull request? -->
3+
4+ ## Unit Testing
5+ <!-- List your unit/integration tests here, or if there are no unit tests, please explain why. -->
6+
7+ ## Operation check
8+ <!-- URL of checklist, etc. -->
9+
10+ > [ !CAUTION]
11+ > ### Release Notes
12+ > <!-- * Information if you need to manually configure something at release time -->
13+ > <!-- * Commands to run after release, etc. -->
14+ > *
15+
16+ > [ !NOTE]
17+ > ### Additional Notes
18+ > <!-- * Reference information for reviewers (if there are any implementation concerns or points of note, please state them) -->
19+ > *
20+
21+ ## Checklist
22+ * [ ] Code follows our Coding Standards.
23+ * [ ] Code matches the confirmed solution in the ticket.
24+ * [ ] Unit/Integration tests have been added or updated.
25+ * [ ] Env/Config/DB changes were confirmed by @cslant/admin .
Original file line number Diff line number Diff line change 1+ name : Dependabot auto-merge
2+ on : pull_request_target
3+
4+ permissions :
5+ pull-requests : write
6+ contents : write
7+
8+ jobs :
9+ dependabot :
10+ runs-on : ubuntu-latest
11+ if : ${{ github.actor == 'dependabot[bot]' }}
12+ steps :
13+
14+ - name : Dependabot metadata
15+ id : metadata
16+ uses : dependabot/fetch-metadata@v3.1.0
17+ with :
18+ github-token : " ${{ secrets.GITHUB_TOKEN }}"
19+
20+ - name : Auto-merge Dependabot PRs for semver-major updates
21+ if : ${{steps.metadata.outputs.update-type == 'version-update:semver-minor'}}
22+ run : gh pr merge --auto --merge "$PR_URL"
23+ env :
24+ PR_URL : ${{github.event.pull_request.html_url}}
25+ GITHUB_TOKEN : ${{secrets.GITHUB_TOKEN}}
26+
27+ - name : Auto-merge Dependabot PRs for semver-patch updates
28+ if : ${{steps.metadata.outputs.update-type == 'version-update:semver-patch'}}
29+ run : gh pr merge --auto --merge "$PR_URL"
30+ env :
31+ PR_URL : ${{github.event.pull_request.html_url}}
32+ GITHUB_TOKEN : ${{secrets.GITHUB_TOKEN}}
You can’t perform that action at this time.
0 commit comments