blog post: Auspice 2024 summary #900
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Dependabot automation | |
| on: pull_request | |
| permissions: | |
| pull-requests: write | |
| contents: write | |
| jobs: | |
| merge-auspice-bump: | |
| if: github.event.pull_request.user.login == 'dependabot[bot]' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - id: metadata | |
| uses: dependabot/fetch-metadata@v2 | |
| with: | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| # Run if Auspice is an updated dependency and there are no major version bumps | |
| # to allow for manual testing before merging. | |
| - if: | | |
| contains(fromJSON(steps.metadata.outputs.updated-dependencies-json).*.dependencyName, 'auspice') | |
| && steps.metadata.outputs.update-type != 'version-update:semver-major' | |
| # Dependabot should ensure CI passes before merging. | |
| run: gh pr comment "${{ github.event.pull_request.html_url }}" --body "@dependabot merge" | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GH_TOKEN_NEXTSTRAIN_BOT_REPO }} |