chore: broaden dependabot auto-merge policy

This commit is contained in:
xixu-me committed 2026-03-17 15:33:37 +08:00
1 parent 183265fd9e
commit c3e8eece2c
2 files changed
+9 -3

No files matched your search

+4
View File
@@ -15,6 +15,10 @@ updates:
labels:
- dependencies
- dependabot
ignore:
- dependency-name: eslint
update-types:
- version-update:semver-major
groups:
npm-production:
dependency-type: production
+5 -3
View File
@@ -25,16 +25,18 @@ jobs:
- name: Approve patch and minor updates
if: |
steps.metadata.outputs.update-type == 'version-update:semver-patch' ||
steps.metadata.outputs.update-type == 'version-update:semver-minor'
steps.metadata.outputs.update-type == 'version-update:semver-minor' ||
steps.metadata.outputs.update-type == 'version-update:semver-major'
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
PR_URL: ${{ github.event.pull_request.html_url }}
run: gh pr review "$PR_URL" --approve --body "Auto-approved for safe Dependabot patch/minor update."
run: gh pr review "$PR_URL" --approve --body "Auto-approved for Dependabot update after policy and CI checks."
- name: Enable auto-merge after checks pass
if: |
steps.metadata.outputs.update-type == 'version-update:semver-patch' ||
steps.metadata.outputs.update-type == 'version-update:semver-minor'
steps.metadata.outputs.update-type == 'version-update:semver-minor' ||
steps.metadata.outputs.update-type == 'version-update:semver-major'
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
PR_URL: ${{ github.event.pull_request.html_url }}