Skip to content

Add Dependabot auto-merge workflow#175

Draft
BoBeenLee wants to merge 1 commit intomasterfrom
feature/dependabot-auto-merge-workflow
Draft

Add Dependabot auto-merge workflow#175
BoBeenLee wants to merge 1 commit intomasterfrom
feature/dependabot-auto-merge-workflow

Conversation

@BoBeenLee
Copy link
Owner

Summary

This PR adds a new GitHub Action workflow that automatically merges Dependabot pull requests when CI tests pass.

Changes

  • Created .github/workflows/dependabot-auto-merge.yml

Features

  • Triggers on Dependabot pull requests (opened, synchronize, reopened)
  • Waits for all CI tests to complete before merging (up to 60 minutes timeout)
  • Uses GitHub's built-in auto-merge feature
  • Skips auto-merge for major version updates (semver-major) to prevent unexpected breaking changes

How it works

  1. When a Dependabot PR is created/updated, the workflow runs
  2. It fetches Dependabot metadata to determine the update type
  3. It waits for all CI checks (from the existing bbl-nx-ci-cd workflow) to pass
  4. If tests pass and it's not a major version update, it enables auto-merge on the PR
  5. GitHub's auto-merge feature will then merge the PR once all required checks pass

- Creates a GitHub Action that automatically merges Dependabot PRs when tests pass
- Waits for CI checks to complete before enabling auto-merge
- Skips auto-merge for major version updates
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants