Set up Dependabot auto-merge & Must pass CI before merging

.asf.yaml

@@ -41,6 +41,10 @@ github:
     main:
       required_status_checks:
         strict: true
+        contexts:
+          - dependency-review
+          - Build (ubuntu-latest, 8, java)
+          - Build (ubuntu-latest, 11, java)
       required_pull_request_reviews:
         dismiss_stale_reviews: true
         required_approving_review_count: 0 # Temporary 0 to allow committers to merge themselves PR

.github/dependabot.yml

@@ -21,13 +21,12 @@ updates:
     directory: "/"
     open-pull-requests-limit: 10
     schedule:
-      interval: "weekly"
+      interval: "daily" # TODO Temporary daily for testing auto-merge
     ignore:
       - dependency-name: "*"
         update-types: [ "version-update:semver-major" ]
   - package-ecosystem: "npm"
     directory: "./eventmesh-dashboard-view"
-    open-pull-requests-limit: 5
     schedule:
       interval: "monthly"
     ignore:

.github/workflows/auto-merge-dependabot.yml

@@ -0,0 +1,34 @@
+name: Dependabot auto-merge
+on: pull_request
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  dependabot:
+    runs-on: ubuntu-latest
+    if: github.actor == 'dependabot[bot]'
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Dependabot metadata
+        id: metadata
+        uses: dependabot/fetch-metadata@v2
+        with:
+          github-token: "${{ secrets.GITHUB_TOKEN }}"
+          skip-commit-verification: true
+
+      - name: Approve a PR
+        run: gh pr review --approve "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
+
+      - name: Enable auto-merge for Dependabot PRs
+        if: steps.metadata.outputs.update-type == 'version-update:semver-patch'
+        run: gh pr merge --auto --merge "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}

.github/workflows/ci.yml

@@ -61,5 +61,4 @@ jobs:
           cache: maven
 
       - name: Build with Maven
-        shell: bash
-        run: ./mvnw -B package --file pom.xml
+        run: mvn -B package --file pom.xml