From 2694d39ad60f9d99f983015875b4e36c6da7452c Mon Sep 17 00:00:00 2001 From: mahula Date: Sat, 26 Oct 2024 09:30:39 +0200 Subject: [PATCH 1/3] add automering for dependabot pull requests --- .github/workflows/automerge.yml | 0 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 .github/workflows/automerge.yml diff --git a/.github/workflows/automerge.yml b/.github/workflows/automerge.yml new file mode 100644 index 0000000..e69de29 From 6e0204ca8a0d7e661bacddeeab6fbdcb287dc93f Mon Sep 17 00:00:00 2001 From: mahula Date: Sat, 26 Oct 2024 10:14:30 +0200 Subject: [PATCH 2/3] add automering for dependabot pull requests --- .github/workflows/automerge.yml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/.github/workflows/automerge.yml b/.github/workflows/automerge.yml index e69de29..62a6e0e 100644 --- a/.github/workflows/automerge.yml +++ b/.github/workflows/automerge.yml @@ -0,0 +1,15 @@ +name: auto-merge + +on: + pull_request: + +jobs: + auto-merge: + permissions: write-all + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4.2.2 + - uses: ahmadnassri/action-dependabot-auto-merge@v2 + with: + target: minor + github-token: ${{ secrets.DEPENDABOT_AUTOMERGE_TOKEN }} \ No newline at end of file From 9e1a26e7b5f4f6953be69dbd72425168099cedd0 Mon Sep 17 00:00:00 2001 From: mahula Date: Sat, 26 Oct 2024 12:17:38 +0200 Subject: [PATCH 3/3] pin github actions in automerge flow file by commit hash --- .github/workflows/automerge.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/automerge.yml b/.github/workflows/automerge.yml index 62a6e0e..1b45c22 100644 --- a/.github/workflows/automerge.yml +++ b/.github/workflows/automerge.yml @@ -8,8 +8,8 @@ jobs: permissions: write-all runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4.2.2 - - uses: ahmadnassri/action-dependabot-auto-merge@v2 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2 + - uses: ahmadnassri/action-dependabot-auto-merge@4b9c6f0185a1c94f18bc293dc050c8c073b4fcc8 #v2.6.6 with: target: minor github-token: ${{ secrets.DEPENDABOT_AUTOMERGE_TOKEN }} \ No newline at end of file