dependabot-approve-and-request-merge.yml

name: "dependabot approve-and-request-merge"

on: pull_request_target

jobs:
  worker:
    permissions:
      contents: write
      id-token: write
      pull-requests: write
    runs-on: ubuntu-latest
    if: github.actor == 'dependabot[bot]'
    steps:
      - name: Fetch Dependabot metadata
        id: dependabot-metadata
        uses: dependabot/fetch-metadata@v1
        with:
          github-token: '${{ secrets.GITHUB_TOKEN }}'
      - name: Auto-merge dependabot PRs
        uses: contentful/github-auto-merge@v2
        # Don't auto-merge major version upgrades, we'll handle these manually
        if: ${{steps.dependabot-metadata.outputs.update-type != 'version-update:semver-major'}}
        with:
          VAULT_URL: ${{ secrets.VAULT_URL }}