Auto-merge dependabot PRs [DEVINFRA-285] #331
Conversation
|
Kudos, SonarCloud Quality Gate passed!
|
|
Note https://github.com/marketplace/actions/dependabot-auto-merge doesnt currently work due to ahmadnassri/action-dependabot-auto-merge#60 https://github.com/fastify/github-action-merge-dependabot should not have the same problem. It isnt clear whether those two will work with gitmodules updates , as they have config focused on choosing which PRs to merge based on semver. |
|
Do I need to add a secret to this repo to enable this? |
|
yes, a personal access token for an account which will do the commenting on PRs. Secret name in this PR is REPO_COMMENT_TOKEN, but I can change it if you prefer an alternative. |
Requires a tokem with comment access to add the comment to Dependabot PRs, to be put into secret named
REPO_COMMENT_TOKEN.I've added an issue in the GitHub action about my slightly different way of invoking the action. jo-sm/at-dependabot-merge#1
Currently it fires whenever the "CI" workflow is successful, ignoring the Lint and Python workflows.
If this general approach is acceptable, the three workflows can be tied together either sequentially or concurrently with a new workflow that waits on them all.
Tested at jayvdb/jekyll-netlify#8