Files
fetch-metadata/.github/workflows/dependabot-auto-merge.yml
dependabot[bot] dc132f8d6b Bump actions/create-github-app-token from 2.2.0 to 2.2.1
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](7e473efe3c...29824e69f5)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-version: 2.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-07 16:01:11 +00:00

23 lines
731 B
YAML

name: Dependabot auto-merge
on: pull_request_target
jobs:
dependabot:
runs-on: ubuntu-latest
if: ${{ github.event.pull_request.user.login == 'dependabot[bot]' }}
steps:
- name: Generate token
id: generate_token
uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
with:
app-id: ${{ secrets.FETCH_METADATA_ACTION_AUTOMATION_APP_ID }}
private-key: ${{ secrets.FETCH_METADATA_ACTION_AUTOMATION_PRIVATE_KEY }}
- uses: actions/checkout@v6
- name: Auto-merge
run: gh pr merge --auto --merge '${{ github.event.pull_request.html_url }}'
env:
GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}