From 8d367abe1d49e00e17bbea49c4579b2501012d9e Mon Sep 17 00:00:00 2001 From: Alain Bourgeois Date: Mon, 13 Apr 2026 15:42:19 +0200 Subject: [PATCH] Add steps to approve and auto-merge Dependabot PRs --- .github/workflows/ci.yml | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index b8f3c80..3f81a22 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -52,7 +52,18 @@ jobs: contents: write pull-requests: write steps: + - name: Dependabot metadata + id: metadata + uses: dependabot/fetch-metadata@v2 + with: + github-token: "${{ secrets.GITHUB_TOKEN }}" + - name: Approve Dependabot PR + run: gh pr review --approve "$PR_URL" + env: + PR_URL: ${{ github.event.pull_request.html_url }} + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Enable auto-merge for Dependabot PRs + if: steps.metadata.outputs.update-type == 'version-update:semver-patch' || steps.metadata.outputs.update-type == 'version-update:semver-minor' run: gh pr merge --auto --merge "$PR_URL" # Use Github CLI to merge automatically the PR env: PR_URL: ${{github.event.pull_request.html_url}}