[Snyk] Security upgrade @iobroker/adapter-dev from 1.2.0 to 1.3.0 #155
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Automatically merge Dependabot PRs when version comparison is within the range | |
| # that is configured in .github/auto-merge.yml | |
| name: Auto-Merge Dependabot PRs | |
| on: | |
| # WARNING: This needs to be run in the PR base, DO NOT build untrusted code in this action | |
| # details under https://github.blog/changelog/2021-02-19-github-actions-workflows-triggered-by-dependabot-prs-will-run-with-read-only-permissions/ | |
| pull_request_target: | |
| jobs: | |
| auto-merge: | |
| if: github.actor == 'dependabot[bot]' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v2 | |
| - name: Check if PR should be auto-merged | |
| uses: ahmadnassri/action-dependabot-auto-merge@v2 | |
| with: | |
| # In order to use this, you need to go to https://github.com/settings/tokens and | |
| # create a Personal Access Token with the permission "public_repo". | |
| # Enter this token in your repository settings under "Secrets" and name it AUTO_MERGE_TOKEN | |
| github-token: ${{ secrets.AUTO_MERGE_TOKEN }} | |
| # By default, squash and merge, so Github chooses nice commit messages | |
| command: squash and merge |