-
Notifications
You must be signed in to change notification settings - Fork 53
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ci(dependabot): Auto-approve and enable automerge for dependabot PRs #1013
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'd normally be worried about this, but I guess with the tests it's fine!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Excited to give this a spin!
Well, auto-approve worked, but enabling automerge didn't... |
Description
This PR auto-approves dependabot PRs and enable automerge on these,
so that these PRs are merged automatically if all checks pass.
Big question to answer (after merging): does using
secrets.GITHUB_TOKEN
work? At https://github.com/marketplace/actions/enable-pull-request-automerge#dependabot-example, they recommend using a personal access token (not set yet), but they say usingsecrets.GITHUB_TOKEN
could work.PR Checklist: