chore(bots): automate dependency management routine

- Make dependabot target its own branch, putting all dep changes there - Have mergify manage dependabot by approving and commanding it when all tests pass and the change is not a major change
opengovsg · Apr 28, 2021 · c617b5c · c617b5c
1 parent d812641
commit c617b5c
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -11,3 +11,4 @@ updates:
       interval: "daily"
     commit-message: 
       prefix: "chore(deps):"
+    target-branch: "dependabot"
diff --git a/.github/mergify.yml b/.github/mergify.yml
@@ -0,0 +1,12 @@
+pull_request_rules:
+  - name: command dependabot to squash and merge
+    conditions:
+      - 'author=dependabot[bot]'
+      - '#check-failure=0'
+      - 'title~=bump [^\s]+ from ([\d]+)\..+ to \1\.'
+      - 'base=dependabot'
+    actions:
+      review:
+        type: APPROVE
+      comment:
+        message: "@dependabot squash and merge"