build(deps): bump github.com/steadybit/action-kit/go/action_kit_api/v2 from 2.9.3 to 2.9.4 #68
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Dependabot auto-merge | |
| on: pull_request | |
| permissions: | |
| contents: write | |
| pull-requests: write | |
| # WARNING - Make sure the repo: | |
| # - has setup up branch protection rules (required status checks) - otherwise all PR will be merged without waiting for build results | |
| # - allows auto-merge (settings -> general -> Pull Requests -> Allow Auto-Merge) | |
| jobs: | |
| dependabot: | |
| runs-on: ubuntu-latest | |
| if: ${{ github.actor == 'dependabot[bot]' }} | |
| steps: | |
| - name: Dependabot metadata | |
| id: metadata | |
| uses: dependabot/fetch-metadata@v2 | |
| with: | |
| github-token: "${{ secrets.GITHUB_TOKEN }}" | |
| - name: Delete this step after you've created the branch protection rules! | |
| # extension-scaffold should always run, even with this security step. In all other repos the user has to manually delete the step. `format` to prevent a "change all" text replacement. | |
| if: ${{github.event.repository.name != format('extension-{0}{1}','scaf', 'fold')}} | |
| run: exit 1 | |
| - name: Enable auto-merge for Dependabot PRs | |
| if: ${{steps.metadata.outputs.package-ecosystem == 'github_actions' || (steps.metadata.outputs.update-type == 'version-update:semver-minor' || steps.metadata.outputs.update-type == 'version-update:semver-patch')}} | |
| run: gh pr merge --auto --merge "$PR_URL" | |
| env: | |
| PR_URL: ${{github.event.pull_request.html_url}} | |
| GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}} |