Skip to content

fix(deps): bump github.com/compose-spec/compose-go/v2 from 2.9.1 to 2.11.0 in /apps/cli-go #9567

fix(deps): bump github.com/compose-spec/compose-go/v2 from 2.9.1 to 2.11.0 in /apps/cli-go

fix(deps): bump github.com/compose-spec/compose-go/v2 from 2.9.1 to 2.11.0 in /apps/cli-go #9567

Workflow file for this run

# Adapted from https://blog.somewhatabstract.com/2021/10/11/setting-up-dependabot-with-github-actions-to-approve-and-merge/
name: Dependabot auto-merge
on: pull_request
permissions:
contents: read
jobs:
dependabot:
runs-on: ubuntu-latest
# Checking the actor will prevent your Action run failing on non-Dependabot
# PRs but also ensures that it only does work for Dependabot PRs.
if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == github.event.pull_request.head.repo.full_name
steps:
# This first step will fail if there's no metadata and so the approval
# will not occur.
- name: Dependabot metadata
id: meta
uses: dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98 # v3.1.0
with:
github-token: "${{ secrets.GITHUB_TOKEN }}"
- name: Generate token
id: app-token
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
with:
client-id: ${{ vars.GH_APP_CLIENT_ID }}
private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
permission-pull-requests: write
permission-contents: write
# Here the PR gets approved.
- name: Approve a PR
run: gh pr review --approve "${GITHUB_EVENT_PULL_REQUEST_HTML_URL}"
env:
GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
GITHUB_EVENT_PULL_REQUEST_HTML_URL: ${{ github.event.pull_request.html_url }}
# Finally, this sets the PR to allow auto-merging once all required
# checks pass.
- name: Enable auto-merge for Dependabot PRs
run: gh pr merge --auto --squash "${GITHUB_EVENT_PULL_REQUEST_HTML_URL}"
env:
GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
GITHUB_EVENT_PULL_REQUEST_HTML_URL: ${{ github.event.pull_request.html_url }}