Files
setup-maven-action/.github/workflows/auto-approve.yml
dependabot[bot] 5344d1092e Bump dependabot/fetch-metadata from 1.1.1 to 1.2.0
Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) from 1.1.1 to 1.2.0.
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](https://github.com/dependabot/fetch-metadata/compare/v1.1.1...v1.2.0)

---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-21 14:13:50 +01:00

35 lines
1008 B
YAML

name: Auto Approve
on:
pull_request_target
jobs:
auto-approve:
runs-on: ubuntu-latest
steps:
- name: Dependabot metadata
if: github.actor == 'dependabot[bot]'
id: dependabot-metadata
uses: dependabot/fetch-metadata@v1.2.0
with:
github-token: "${{ secrets.TECH_TOKEN }}"
- name: Enable auto-merge for Dependabot PRs
if: >
github.actor == 'dependabot[bot]'
&& steps.dependabot-metadata.outputs.update-type != 'version-update:semver-major'
run: gh pr merge --auto --rebase "$PR_URL"
env:
PR_URL: ${{github.event.pull_request.html_url}}
GITHUB_TOKEN: ${{ secrets.TECH_TOKEN }}
- name: Approve a PR
if: >
github.actor == 'dependabot[bot]'
|| github.actor == 'slawekjaranowski'
run: gh pr review --approve "$PR_URL"
env:
PR_URL: ${{github.event.pull_request.html_url}}
GITHUB_TOKEN: ${{ secrets.TECH_TOKEN }}