Merge pull request #479 from xt0rted/xt0rted-patch-1

Create dependabot-auto-merge.yml

.github/workflows/dependabot-auto-merge.yml

@@ -0,0 +1,37 @@
+# https://gist.github.com/xt0rted/46475099dc0a70ba63e16e3177407872
+name: Dependabot auto-merge
+
+on: pull_request_target
+
+permissions:
+  contents: read
+  pull-requests: read
+
+jobs:
+  dependabot:
+    runs-on: ubuntu-latest
+
+    if: ${{ github.actor == 'dependabot[bot]' }}
+
+    steps:
+      - name: Generate token
+        id: generate_token
+        uses: tibdex/[email protected]
+        with:
+          app_id: ${{ secrets.DEPENDAMERGE_APP_ID }}
+          private_key: ${{ secrets.DEPENDAMERGE_PRIVATE_KEY }}
+
+      - name: Dependabot metadata
+        id: dependabot-metadata
+        uses: dependabot/[email protected]
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Authenticate cli
+        run: echo "${{ steps.generate_token.outputs.token }}" | gh auth login --with-token
+
+      - name: Enable auto-merge for Dependabot PRs
+        if: steps.dependabot_metadata.outputs.dependency-type == 'direct:development' && (steps.dependabot-metadata.outputs.update-type == 'version-update:semver-minor' || steps.dependabot-metadata.outputs.update-type == 'version-update:semver-patch')
+        run: gh pr merge --auto --merge "$PR_URL"
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}