diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 1395c6d..6e4ab2f 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,26 +1,21 @@ -# To get started with Dependabot version updates, you'll need to specify which -# package ecosystems to update and where the package manifests are located. -# Please see the documentation for all configuration options: -# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates - -version: 2 -updates: - - package-ecosystem: "nuget" - directory: "/" - schedule: - interval: "daily" - reviewers: - - "JohannesFinsveen" - - "likp" - - "runejo" - groups: - small-change: - patterns: - - "*" - update-types: - - "minor" - - "patch" - - package-ecosystem: "github-actions" - directory: "/" - schedule: - interval: "daily" +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for all configuration options: +# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates + +version: 2 +updates: + - package-ecosystem: "nuget" + directory: "/" + schedule: + interval: "daily" + groups: + minor-version-updates: + applies-to: version-updates + update-types: + - "minor" + + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "daily" diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml new file mode 100644 index 0000000..898a133 --- /dev/null +++ b/.github/workflows/dependabot.yml @@ -0,0 +1,26 @@ +name: Dependabot auto-merge +on: pull_request + +permissions: + contents: write + pull-requests: write + +jobs: + dependabot: + runs-on: ubuntu-latest + if: github.actor == 'dependabot[bot]' + env: + PR_URL: ${{github.event.pull_request.html_url}} + GH_TOKEN: ${{secrets.GITHUB_TOKEN}} + steps: + - name: Dependabot metadata + id: metadata + uses: dependabot/fetch-metadata@v2 + with: + github-token: "${{ secrets.GITHUB_TOKEN }}" + - name: Approve + if: steps.metadata.outputs.update-type == 'version-update:semver-patch' + run: gh pr review --approve "$PR_URL" + - name: Merge + if: steps.metadata.outputs.update-type == 'version-update:semver-patch' + run: gh pr merge --auto --squash "$PR_URL" diff --git a/CODEOWNERS b/CODEOWNERS new file mode 100644 index 0000000..77696b2 --- /dev/null +++ b/CODEOWNERS @@ -0,0 +1 @@ +* @pxtools/devs-scb @pxtools/devs-ssb