Repository navigation
41 lines (38 loc) · 1.81 KB
/
Copy pathauto-merge.yml
File metadata and controls
41 lines (38 loc) · 1.81 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
name: auto-merge
# pull_request_target runs in the base-branch context, which is required so
# that GITHUB_TOKEN gets the write permissions declared below even for PRs
# opened by Dependabot (which would otherwise receive a read-only token on
# regular pull_request events). This workflow never checks out PR head code,
# so the usual pull_request_target injection risk does not apply.
on: pull_request_target
permissions:
contents: write
pull-requests: write
jobs:
auto-merge-dependabot:
name: Auto-Merge Dependabot PRs
runs-on: ubuntu-latest
if: ${{ github.event.pull_request.user.login == 'dependabot[bot]' }}
steps:
- name: Dependabot metadata
id: metadata
uses: dependabot/fetch-metadata@v3
- name: Enable auto-merge for non-major updates
if: ${{ steps.metadata.outputs.update-type != 'version-update:semver-major' }}
run: gh pr merge --squash --auto "${{ github.event.pull_request.html_url }}"
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
auto-merge-scala-steward:
name: Auto-Merge Scala Steward PRs
runs-on: ubuntu-latest
if: ${{ github.event.pull_request.user.login == 'scala-steward' }}
steps:
# Skip auto-merge if the PR carries a semver-major label. Note: this repo
# does not yet apply semver labels to Scala Steward PRs, so this guard is
# a no-op until early-semver-* labels are added to the repo and Scala
# Steward is configured to apply them.
- name: Enable auto-merge for non-major updates
if: ${{ !contains(github.event.pull_request.labels.*.name, 'semver-major') && !contains(github.event.pull_request.labels.*.name, 'early-semver-major') }}
run: gh pr merge --squash --auto "${{ github.event.pull_request.html_url }}"
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}