Skip to content

Bump actions/checkout from 4.2.1 to 4.2.2 #168

Bump actions/checkout from 4.2.1 to 4.2.2

Bump actions/checkout from 4.2.1 to 4.2.2 #168

name: Dependabot auto-merge
on:
pull_request:
branches:
- main
permissions:
contents: write
pull-requests: write
jobs:
dependabot:
runs-on: ubuntu-latest
if: ${{ github.actor == 'dependabot[bot]' && github.event.pull_request.auto_merge == null }}
steps:
- name: Dependabot metadata
id: metadata
uses: dependabot/fetch-metadata@v2
with:
github-token: "${{ secrets.GITHUB_TOKEN }}"
- name: Approve and auto-merge PRs for minor/patch updates of github-actions
if: |
steps.metadata.outputs.package-ecosystem == 'github_actions' &&
contains(fromJSON('["version-update:semver-minor", "version-update:semver-patch"]'), steps.metadata.outputs.update-type)
run: gh pr review --approve "$PR_URL" && gh pr merge --auto --rebase "$PR_URL"
env:
PR_URL: ${{github.event.pull_request.html_url}}
GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}