A GitHub Action to automatically label, approve, and merge pull requests made by Dependabot. This was built because the auto-merge feature was removed when Dependabot became a native-GitHub feature.

You can run this workflow, for example, once every hour:

name: Auto-merge minor/patch
on:
  schedule:
    - cron: "0 * * * *"
jobs:
  test:
    name: Auto-merge minor and patch updates
    runs-on: ubuntu-18.04
    steps:
      - uses: koj-co/dependabot-pr-action@master
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          merge-minor: true
          merge-patch: true

Your GitHub token, usually {{ secrets.GITHUB_TOKEN }} or a personal access token if you have a bot account.

To add labels to the Dependabot pull request, you can specify a comma-separated string of labels:

To configure the workflow, you can set any of these inputs to true:

• If you set any auto-label parameter to true, the release type (major, minor, etc.) label will be added to the pull request automatically, if all checks have passed
• If you set any merge parameter to true, the resulting pull request will be auto-merged, if all checks have passed
• If you set any approve parameter to true, the pull request will be automatically approved (with a pull request review), if all checks have passed

If you don't want to check for status checks, you can set the input ignore-status-checks to true. You can also set the merge-commit input if you want a custom merge commit message.

• Code: MIT © Koj
• "GitHub" is a trademark of GitHub, Inc.

_{An open source project by Koj.
Furnish your home in style, for as low as CHF175/month →}