pr-auto-merge.yaml

# https://docs.github.com/en/github-ae@latest/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions
name: Auto-merge

on:
  # We're using pull_request_target instead of pull_request due to permission issues with the pull_request target:
  # https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions#responding-to-events
  pull_request_target:

jobs:
  auto-merge:
    name: Dependabot auto-merge

    runs-on: ubuntu-latest

    if: ${{ github.actor == 'dependabot[bot]' }}

    steps:
      - name: Enable auto-merge
        run: gh pr merge -R "${{ github.repository }}" --squash --auto "${{ github.event.pull_request.number }}"
        env:
          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}