GeezerVison is showing github.com — Group Dependabot updates and add auto-merge workflow · proxymesh/python-proxy-headers@3599590
File tree
Expand file treeCollapse file tree
Open diff view settings
Expand file treeCollapse file tree
Open diff view settings
Collapse file
Copy file name to clipboard +24-7Lines changed: 24 additions & 7 deletions | Original file line number | Diff line number | Diff line change |
|---|
|
1 | | -# |
2 | | -# To get started with Dependabot version updates, you'll need to specify which |
3 | | -# package ecosystems to update and where the package manifests are located. |
4 | | -# Please see the documentation for all configuration options: |
5 | | -# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file |
6 | | -# |
7 | | - |
8 | 1 | version: 2 |
9 | 2 | updates: |
10 | 3 | - package-ecosystem: "pip" |
11 | 4 | directory: "/" |
12 | 5 | schedule: |
13 | 6 | interval: "weekly" |
| 7 | + day: "monday" |
| 8 | + open-pull-requests-limit: 5 |
| 9 | + cooldown: |
| 10 | + default-days: 3 |
| 11 | + labels: |
| 12 | + - "dependencies" |
| 13 | + - "automerge" |
| 14 | + groups: |
| 15 | + prod-minor-patch: |
| 16 | + dependency-type: "production" |
| 17 | + update-types: |
| 18 | + - "minor" |
| 19 | + - "patch" |
| 20 | + dev-all: |
| 21 | + dependency-type: "development" |
| 22 | + update-types: |
| 23 | + - "minor" |
| 24 | + - "patch" |
| 25 | + - "major" |
14 | 26 | - package-ecosystem: "github-actions" |
15 | 27 | directory: "/" |
16 | 28 | schedule: |
17 | 29 | interval: "weekly" |
| 30 | + day: "monday" |
| 31 | + groups: |
| 32 | + actions: |
| 33 | + patterns: |
| 34 | + - "*" |
Collapse file
Copy file name to clipboard +18Lines changed: 18 additions & 0 deletions | Original file line number | Diff line number | Diff line change |
|---|
|
| 1 | +name: dependabot-auto-merge |
| 2 | +on: |
| 3 | + pull_request_target |
| 4 | +permissions: |
| 5 | + contents: write |
| 6 | + pull-requests: write |
| 7 | +jobs: |
| 8 | + automerge: |
| 9 | + if: github.actor == 'dependabot[bot]' |
| 10 | + runs-on: ubuntu-latest |
| 11 | + steps: |
| 12 | + - uses: dependabot/fetch-metadata@v2 |
| 13 | + id: meta |
| 14 | + - if: steps.meta.outputs.update-type != 'version-update:semver-major' |
| 15 | + run: gh pr merge --auto --squash "$PR" |
| 16 | + env: |
| 17 | + PR: ${{ github.event.pull_request.html_url }} |
| 18 | + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} |