github-action-merge-dependabot

This action automatically approves and merges dependabot PRs.

OTHER License

Stars
151
Committers
29

Bot releases are hidden (Show)

github-action-merge-dependabot - v3.0.2

Published by Eomm almost 3 years ago

How to upgrade from 2.x to new 3.x

  • Update the action version.
  • Add the new permissions configuration into your workflow or, instead, you can set the permissions rules on the repository or on the organization.
  • If you have customized the api-url you can:

Migration example:

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      # ...

  automerge:
    needs: build
    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+      contents: write
    steps:
-     - uses: fastify/[email protected]
+     - uses: fastify/github-action-merge-dependabot@v3
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}

What's Changed

Full Changelog: https://github.com/fastify/github-action-merge-dependabot/compare/v3.0.1...v3.0.2

github-action-merge-dependabot - v3.0.1

Published by Eomm almost 3 years ago

How to upgrade from 2.x to new 3.x

  • Update the action version.
  • Add the new permissions configuration into your workflow or, instead, you can set the permissions rules on the repository or on the organization.
  • If you have customized the api-url you can:

Migration example:

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      # ...

  automerge:
    needs: build
    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+      contents: write
    steps:
-     - uses: fastify/[email protected]
+     - uses: fastify/[email protected]
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}

What's Changed

Full Changelog: https://github.com/fastify/github-action-merge-dependabot/compare/v3...v3.0.1

github-action-merge-dependabot - v3.0.0

Published by Eomm almost 3 years ago

How to upgrade from 2.x to new 3.x

  • Update the action version.
  • Add the new permissions configuration into your workflow or, instead, you can set the permissions rules on the repository or on the organization.
  • If you have customized the api-url you can:

Migration example:

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      # ...

  automerge:
    needs: build
    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+      contents: write
    steps:
-     - uses: fastify/[email protected]
+     - uses: fastify/[email protected]
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}

What's Changed

New Contributors

Full Changelog: https://github.com/fastify/github-action-merge-dependabot/compare/v2.7.1...v3.0.0

github-action-merge-dependabot - v2.7.1

Published by Eomm almost 3 years ago

What's Changed

New Contributors

Full Changelog: https://github.com/fastify/github-action-merge-dependabot/compare/v2.7.0...v2.7.1

github-action-merge-dependabot - v2.7.0

Published by Eomm almost 3 years ago

What's Changed

Full Changelog: https://github.com/fastify/github-action-merge-dependabot/compare/v2.6.0...v2.7.0

github-action-merge-dependabot - v2.6.0

Published by simoneb almost 3 years ago

What's Changed

New Contributors

Full Changelog: https://github.com/fastify/github-action-merge-dependabot/compare/v2.5.0...v2.6.0

github-action-merge-dependabot - v2.5.0

Published by simoneb about 3 years ago

📚 PR:

  • chore(deps-dev): bump @vercel/ncc from 0.29.0 to 0.29.1 (#64)
  • chore(deps-dev): bump @vercel/ncc from 0.29.1 to 0.29.2 (#65)
  • chore(deps): bump @actions/core from 1.4.0 to 1.5.0 (#66)
  • chore(deps-dev): bump husky from 7.0.1 to 7.0.2 (#68)
  • chore(deps-dev): bump @vercel/ncc from 0.29.2 to 0.30.0 (#69)
  • chore(deps): bump node-fetch from 2.6.1 to 3.0.0 (#70)
  • Revert "chore(deps): bump node-fetch from 2.6.1 to 3.0.0 (#70)" (#71)
  • chore(deps): bump node-fetch from 2.6.1 to 3.0.0 (#73)
  • chore: only minor dependancy automerge (#72)
  • Revert "chore(deps): bump node-fetch from 2.6.1 to 3.0.0 (#73)" (#74)
  • chore(deps): bump node-fetch from 2.6.1 to 2.6.2 (#77)
  • chore(deps-dev): bump prettier from 2.3.2 to 2.4.0 (#78)
  • chore(deps-dev): bump @vercel/ncc from 0.30.0 to 0.31.0 (#79)
  • chore(deps-dev): bump @vercel/ncc from 0.31.0 to 0.31.1 (#80)
  • chore(deps-dev): bump prettier from 2.4.0 to 2.4.1 (#81)
  • Change type of exclude property to csv (#76)
github-action-merge-dependabot - v2.4.0

Published by simoneb about 3 years ago

📚 PR:

  • chore: bump v2.4.0
  • docs: remove update notice
  • feat: add support for workflow_dispatch event (#51)
github-action-merge-dependabot - v2.3.0

Published by simoneb about 3 years ago

📚 PR:

  • chore: upgrade husky to latest
  • doc: upgrade notice
  • chore(deps): bump actions/setup-node from 2.1.5 to 2.2.0 (#49)
  • chore(deps-dev): bump eslint from 7.29.0 to 7.30.0 (#50)
  • chore(deps-dev): bump husky from 7.0.0 to 7.0.1 (#52)
  • chore(deps-dev): bump eslint from 7.30.0 to 7.31.0 (#55)
  • chore(deps-dev): bump @vercel/ncc from 0.28.6 to 0.29.0 (#54)
  • chore(deps): bump actions/setup-node from 2.2.0 to 2.3.0 (#56)
  • chore(deps-dev): bump eslint from 7.31.0 to 7.32.0 (#57)
  • chore(deps): bump actions/setup-node from 2.3.0 to 2.3.1 (#58)
  • chore(deps): bump actions/setup-node from 2.3.1 to 2.3.2 (#59)
  • chore(deps): bump actions/setup-node from 2.3.2 to 2.4.0 (#60)
  • fix: subdirectory pull requests from dependabot (#61)
github-action-merge-dependabot - v2.2.0

Published by simoneb over 3 years ago

📚 PR:

  • chore: remove approve-only
  • chore: update readme to use latest version in examples
  • chore(deps-dev): bump eslint from 7.27.0 to 7.28.0 (#41)
  • chore(deps): bump @actions/core from 1.3.0 to 1.4.0 (#42)
  • chore(deps-dev): bump eslint from 7.28.0 to 7.29.0 (#43)
  • chore(deps-dev): bump husky from 4.3.8 to 7.0.0 (#48)
  • feat: add target parameter, make it major by default (#47)
github-action-merge-dependabot - v2.1.1

Published by simoneb over 3 years ago

add install github app warning

github-action-merge-dependabot -

Published by simoneb over 3 years ago

gcp api url (#38)

github-action-merge-dependabot -

Published by simoneb over 3 years ago

Use external GitHub app as a delegate for approval and merging after GitHub introduced restrictions around permissions of GITHUB_TOKEN secret and availability of secrets in Dependabot Pull Requests

github-action-merge-dependabot - v1.2.1

Published by simoneb over 3 years ago

  • fix: handling of boolean input
github-action-merge-dependabot - v1.2.0

Published by mcollina over 3 years ago

  • feat: approve only (#9)
github-action-merge-dependabot - v1.1.1

Published by mcollina almost 4 years ago

just a fake release for release on the marketplace

github-action-merge-dependabot - v1.0.1

Published by mcollina almost 4 years ago

Package Rankings
Top 1.16% on Github actions
Related Projects