From dc1f1c247ae0017e310b919cda04cdb81694de6d Mon Sep 17 00:00:00 2001 From: Jasmine Schladen Date: Tue, 16 Mar 2021 15:39:22 -0700 Subject: [PATCH] Add config to uptake GitHub's native Dependabot with auto-merge action --- .github/dependabot.yml | 15 +++++++++++++++ .github/workflows/dependabot-auto-merge.yml | 14 ++++++++++++++ 2 files changed, 29 insertions(+) create mode 100644 .github/dependabot.yml create mode 100644 .github/workflows/dependabot-auto-merge.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..46b1d24d --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,15 @@ + version: 2 + updates: + - directory: "/" + schedule: + interval: "weekly" + day: "monday" + time: "08:00" + timezone: "America/Los_Angeles" + package-ecosystem: "pip" + reviewers: + - "hosseinsh" + - "csine-nflx" + - "charhate" + - "jtschladen" + versioning-strategy: lockfile-only \ No newline at end of file diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml new file mode 100644 index 00000000..be012941 --- /dev/null +++ b/.github/workflows/dependabot-auto-merge.yml @@ -0,0 +1,14 @@ +name: dependabot-auto-merge + +on: + pull_request: + +jobs: + auto-merge: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v2 + - uses: ahmadnassri/action-dependabot-auto-merge@v2 + with: + target: minor + github-token: ${{ secrets.DEPENDABOT_GITHUB_TOKEN }} \ No newline at end of file