-
Notifications
You must be signed in to change notification settings - Fork 0
41 lines (37 loc) · 1.27 KB
/
Copy pathdependabot.yaml
File metadata and controls
41 lines (37 loc) · 1.27 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
name: Dependabot Auto Merge
on:
pull_request:
branches:
- main
permissions:
pull-requests: write
contents: write
jobs:
# ---------------------------------------------------
# Auto-merge GitHub Actions updates
# ---------------------------------------------------
merge-github-actions:
if: >
github.actor == 'dependabot[bot]' &&
contains(join(github.event.pull_request.labels.*.name), 'github_actions')
runs-on: ubuntu-latest
steps:
- uses: fastify/github-action-merge-dependabot@v3
with:
github-token: ${{ secrets.dependabot }}
merge-method: rebase
# No target: this avoids semver parsing → GH Actions merge cleanly
# ---------------------------------------------------
# Auto-merge minor (and patch) updates for all other ecosystems
# ---------------------------------------------------
merge-semver-minor:
if: >
github.actor == 'dependabot[bot]' &&
!contains(join(github.event.pull_request.labels.*.name), 'github_actions')
runs-on: ubuntu-latest
steps:
- uses: fastify/github-action-merge-dependabot@v3
with:
github-token: ${{ secrets.dependabot }}
merge-method: rebase
target: minor # Let Fastify enforce SemVer filtering