part_dependabot.yml 683 B

123456789101112131415161718192021222324252627282930
  1. on:
  2. workflow_call: {}
  3. name: "Dependabot"
  4. permissions:
  5. contents: read
  6. jobs:
  7. automerge_dependabot:
  8. name: "Automerge PRs"
  9. runs-on: ubuntu-latest
  10. permissions:
  11. pull-requests: write
  12. contents: write
  13. steps:
  14. - name: Harden Runner
  15. uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
  16. with:
  17. egress-policy: audit
  18. - uses: fastify/github-action-merge-dependabot@c3bde0759d4f24db16f7b250b2122bc2df57e817 # v3.11.0
  19. with:
  20. github-token: ${{ github.token }}
  21. use-github-auto-merge: true
  22. # Major Updates need to be merged manually
  23. target: minor