Bump cdk-nag from 2.28.196 to 2.34.20 in /infrastructure #107

	name: pull request

	on:
	pull_request:
	types: [opened, reopened, review_requested, synchronize]

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	id-token: write
	contents: read

	jobs:
	# 最初にworkflowファイル全体をチェックする
	check-workflows:
	permissions:
	contents: read
	uses: ./.github/workflows/check-workflows.yml

	# workflowファイル全体のチェックが終わったら、テストを実行する
	test:
	needs: check-workflows
	permissions:
	contents: read
	secrets: inherit
	uses: ./.github/workflows/test.yml

	# cdk diffの結果をコメントする
	# このリポジトリとAWS環境のOpen ID Connect等による接続が確立したらコメントを外すと良い
	cdk-diff-comment:
	needs: check-workflows
	if: github.actor != 'dependabot[bot]'
	permissions:
	id-token: write
	contents: write
	pull-requests: write
	secrets: inherit
	uses: ./.github/workflows/post-cdk-diff.yml

	# サーバアプリケーションのビルドとテストを実行する
	test-server-app:
	needs: check-workflows
	permissions:
	contents: read
	uses: ./.github/workflows/server-app.yml

	# dependabotが作成したPull Requestを自動マージする
	auto-merge-dependabot-pr:
	needs:
	- test
	- test-server-app
	if: github.actor == 'dependabot[bot]'
	runs-on: ubuntu-latest
	permissions:
	contents: write
	pull-requests: write
	steps:
	- uses: actions/checkout@v4
	- run: gh pr merge "${GITHUB_HEAD_REF}" --squash --auto
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback