diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..4f96af5 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,18 @@ +version: 2 +updates: + - package-ecosystem: github-actions + directory: / + open-pull-requests-limit: 5 + schedule: + interval: daily + time: "08:30" + timezone: Europe/Berlin + groups: + patch-and-minor: + update-types: + - patch + - minor + cooldown: + default-days: 7 + exclude: + - getyourguide/* diff --git a/.github/workflows/dependabot-approve.yml b/.github/workflows/dependabot-approve.yml new file mode 100644 index 0000000..e73f6e9 --- /dev/null +++ b/.github/workflows/dependabot-approve.yml @@ -0,0 +1,20 @@ +name: Dependabot Approve + +on: + pull_request: + types: [opened, synchronize] + +concurrency: + group: ${{ github.workflow }}${{ github.ref_name != github.event.repository.default_branch && github.ref || github.run_id }} + cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }} + +permissions: + contents: read + pull-requests: write + +jobs: + auto-approve: + name: Approve PR + uses: getyourguide/actions/.github/workflows/dependabot-approve.yml@main + with: + pr-url: ${{ github.event.pull_request.html_url }} diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml new file mode 100644 index 0000000..cd3c454 --- /dev/null +++ b/.github/workflows/dependabot-automerge.yml @@ -0,0 +1,22 @@ +name: Dependabot Auto Merge + +on: + workflow_dispatch: + schedule: + - cron: "0 9 * * 1-5" + +concurrency: + group: ${{ github.workflow }}${{ github.ref_name != github.event.repository.default_branch && github.ref || github.run_id }} + cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }} + +permissions: + pull-requests: write + id-token: write + +jobs: + auto-merge: + name: Auto merge + uses: getyourguide/actions/.github/workflows/dependabot-merge.yml@main + secrets: inherit + with: + slack_ping_support: true