Commit Graph
15 Commits
Author SHA1 Message Date
dependabot[bot] f216293e14 deps: bump actions/setup-node from 6 to 7
---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-20 01:17:19 +00:00
xixu-me 3d33a1251b ci: trigger Dependabot auto-merge from workflow runs 2026-07-03 23:31:21 +08:00
xixu-me 74780bb08c ci: tolerate protected Dependabot workflow updates 2026-07-03 23:11:48 +08:00
xixu-me 292579d762 ci: add Dependabot auto merge workflow 2026-07-03 23:01:00 +08:00
dependabot[bot] e791a0d8e9 deps: bump actions/checkout from 6 to 7
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-22 01:17:02 +00:00
dependabot[bot] 7ccbf25785 deps: bump actions/github-script from 8 to 9
Bumps [actions/github-script](https://github.com/actions/github-script) from 8 to 9.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v8...v9)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-13 01:20:57 +00:00
xixu-me ff129dae48 Merge pull request #27 from xixu-me/dependabot/github_actions/actions/github-script-8
deps: bump actions/github-script from 7 to 8
2026-03-11 16:07:24 +08:00
xixu-me 06ba6201fd Merge pull request #26 from xixu-me/dependabot/github_actions/actions/checkout-6
deps: bump actions/checkout from 4 to 6
2026-03-11 16:07:23 +08:00
xixu-me 1d0e48d32f Merge pull request #28 from xixu-me/dependabot/github_actions/actions/setup-node-6
deps: bump actions/setup-node from 4 to 6
2026-03-11 16:07:22 +08:00
dependabot[bot] 215f6afc11 deps: bump actions/github-script from 7 to 8
Bumps [actions/github-script](https://github.com/actions/github-script) from 7 to 8.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v7...v8)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-11 08:07:07 +00:00
xixu-me 7f9f9e8024 Auto-merge Dependabot dependency PRs
Update the Dependabot auto-merge workflow to select the repository's allowed merge method and simplify PR filtering.

Changes:
- Renamed the workflow step to "Auto-merge Dependabot dependency PRs".
- Removed version parsing and update-type checks; no longer requires parsing PR title for major/minor/patch.
- Fetch repository settings and choose merge method from `allow_merge_commit`, `allow_squash_merge`, or `allow_rebase_merge`; fail if none allowed.
- Broaden Dependabot detection to any author string containing "dependabot" and require the `dependencies` label before attempting auto-merge.
- Preserve `automerge:disabled` label to skip merges when present.
- Use the chosen `merge_method` (instead of hardcoded `squash`) and log which method was used.

Rationale: support repositories with different merge configurations and simplify auto-merge rules by relying on labels rather than title version parsing.
2026-03-11 16:05:53 +08:00
dependabot[bot] d289e85ad6 deps: bump actions/setup-node from 4 to 6
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v4...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-11 07:49:56 +00:00
dependabot[bot] ee172af1ac deps: bump actions/checkout from 4 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-11 07:49:50 +00:00
xixu-me d1c66862f7 Fix Dependabot config and CI workflow 2026-03-11 15:48:50 +08:00
xixu-me 20f1abc2e8 Add dependency update and automerge workflows 2026-03-11 14:49:38 +08:00