Files
spring-security/.github/workflows/merge-dependabot-pr.yml
Rob Winch 23008b97d4 Refine scopes
Signed-off-by: Rob Winch <362503+rwinch@users.noreply.github.com>
2025-04-25 13:02:25 -05:00

31 lines
737 B
YAML

name: Merge Dependabot PR
on: pull_request_target
run-name: Merge Dependabot PR ${{ github.ref_name }}
permissions:
pull-requests: write
contents: write
jobs:
merge-dependabot-pr:
runs-on: ubuntu-latest
if: github.event.pull_request.user.login == 'dependabot[bot]'
steps:
- uses: actions/checkout@v4
with:
show-progress: false
ref: ${{ github.event.pull_request.head.sha }}
- uses: actions/setup-java@v4
with:
distribution: temurin
java-version: 17
- name: Merge Dependabot pull request
run: gh pr merge ${{ github.event.pull_request.number }} --auto --rebase
env:
GH_TOKEN: ${{ secrets.GH_ACTIONS_REPO_TOKEN }}