xixu-me
6d0b8bfcb6
refactor(actions): remove duplicate Dependabot merge workflow
2026-08-18 11:26:25 +08:00
xixu-me
92c3493b12
fix(actions): retry Dependabot merge after checks
2026-08-18 11:25:19 +08:00
github-actions[bot]
c08b2fa4d8
Merge pull request #73 from xixu-me/dependabot/github_actions/actions/setup-node-7
...
deps: bump actions/setup-node from 6 to 7
2026-08-14 10:19:09 +00:00
xixu-me
a7af4101c8
fix(ci): evaluate all Dependabot pull requests
2026-08-14 18:15:00 +08:00
dependabot[bot]
f216293e14
deps: bump actions/setup-node from 6 to 7
...
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-20 01:17:19 +00:00
xixu-me
3d33a1251b
ci: trigger Dependabot auto-merge from workflow runs
2026-07-03 23:31:21 +08:00
xixu-me
74780bb08c
ci: tolerate protected Dependabot workflow updates
2026-07-03 23:11:48 +08:00
xixu-me
292579d762
ci: add Dependabot auto merge workflow
2026-07-03 23:01:00 +08:00
dependabot[bot]
e791a0d8e9
deps: bump actions/checkout from 6 to 7
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-22 01:17:02 +00:00
dependabot[bot]
7ccbf25785
deps: bump actions/github-script from 8 to 9
...
Bumps [actions/github-script](https://github.com/actions/github-script ) from 8 to 9.
- [Release notes](https://github.com/actions/github-script/releases )
- [Commits](https://github.com/actions/github-script/compare/v8...v9 )
---
updated-dependencies:
- dependency-name: actions/github-script
dependency-version: '9'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-13 01:20:57 +00:00
xixu-me
ff129dae48
Merge pull request #27 from xixu-me/dependabot/github_actions/actions/github-script-8
...
deps: bump actions/github-script from 7 to 8
2026-03-11 16:07:24 +08:00
xixu-me
06ba6201fd
Merge pull request #26 from xixu-me/dependabot/github_actions/actions/checkout-6
...
deps: bump actions/checkout from 4 to 6
2026-03-11 16:07:23 +08:00
xixu-me
1d0e48d32f
Merge pull request #28 from xixu-me/dependabot/github_actions/actions/setup-node-6
...
deps: bump actions/setup-node from 4 to 6
2026-03-11 16:07:22 +08:00
dependabot[bot]
215f6afc11
deps: bump actions/github-script from 7 to 8
...
Bumps [actions/github-script](https://github.com/actions/github-script ) from 7 to 8.
- [Release notes](https://github.com/actions/github-script/releases )
- [Commits](https://github.com/actions/github-script/compare/v7...v8 )
---
updated-dependencies:
- dependency-name: actions/github-script
dependency-version: '8'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-11 08:07:07 +00:00
xixu-me
7f9f9e8024
Auto-merge Dependabot dependency PRs
...
Update the Dependabot auto-merge workflow to select the repository's allowed merge method and simplify PR filtering.
Changes:
- Renamed the workflow step to "Auto-merge Dependabot dependency PRs".
- Removed version parsing and update-type checks; no longer requires parsing PR title for major/minor/patch.
- Fetch repository settings and choose merge method from `allow_merge_commit`, `allow_squash_merge`, or `allow_rebase_merge`; fail if none allowed.
- Broaden Dependabot detection to any author string containing "dependabot" and require the `dependencies` label before attempting auto-merge.
- Preserve `automerge:disabled` label to skip merges when present.
- Use the chosen `merge_method` (instead of hardcoded `squash`) and log which method was used.
Rationale: support repositories with different merge configurations and simplify auto-merge rules by relying on labels rather than title version parsing.
2026-03-11 16:05:53 +08:00
dependabot[bot]
d289e85ad6
deps: bump actions/setup-node from 4 to 6
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 4 to 6.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v4...v6 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-11 07:49:56 +00:00
dependabot[bot]
ee172af1ac
deps: bump actions/checkout from 4 to 6
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-11 07:49:50 +00:00
xixu-me
d1c66862f7
Fix Dependabot config and CI workflow
2026-03-11 15:48:50 +08:00
xixu-me
20f1abc2e8
Add dependency update and automerge workflows
2026-03-11 14:49:38 +08:00