part_dependabot.yml 683 B

123456789101112131415161718192021222324252627282930
  1. on:
  2. workflow_call: {}
  3. name: "Dependabot"
  4. permissions:
  5. contents: read
  6. jobs:
  7. automerge_dependabot:
  8. name: "Automerge PRs"
  9. runs-on: ubuntu-latest
  10. permissions:
  11. pull-requests: write
  12. contents: write
  13. steps:
  14. - name: Harden Runner
  15. uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
  16. with:
  17. egress-policy: audit
  18. - uses: fastify/github-action-merge-dependabot@3892334d1c649bb8119af3d22a3f3766bd5e593f # v3.10.2
  19. with:
  20. github-token: ${{ github.token }}
  21. use-github-auto-merge: true
  22. # Major Updates need to be merged manually
  23. target: minor