hugo-bearblog/.github/workflows/auto-merge.yml
Jan Raasch 2e4a4c2424 Add more permissions to auto-merge workflow 🔓
Still trying to fix

```
GraphQL: Resource not accessible by integration (mergePullRequest)
```

See https://github.com/janraasch/hugo-bearblog/actions/runs/7624250504/job/20766236838

and https://github.com/cli/cli/discussions/7617
2024-01-23 12:08:55 +01:00

29 lines
792 B
YAML

name: Dependabot auto-merge
on:
pull_request:
branches:
- master
permissions:
issues: write
contents: write
pull-requests: write
jobs:
auto-merge:
runs-on: ubuntu-latest
if: github.actor == 'dependabot[bot]'
steps:
- name: Dependabot metadata
id: dependabot-metadata
uses: dependabot/fetch-metadata@v1
with:
github-token: '${{ secrets.GITHUB_TOKEN }}'
- name: Enable auto-merge for Dependabot PRs
if: contains(fromJSON('["version-update:semver-patch", "version-update:semver-minor"]'), steps.dependabot-metadata.outputs.update-type)
run: gh pr merge --auto --squash "$PR_URL"
env:
PR_URL: ${{github.event.pull_request.html_url}}
GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}