chore: Add auto approve for dependabot PRs

.github/workflows/build.yml

@@ -57,3 +57,26 @@ jobs:
  cache: 'pnpm'
  - run: pnpm i --frozen-lockfile
  - run: pnpm compile
+ dependabot:
+ runs-on: ubuntu-latest
+ if: ${{ github.actor == 'dependabot[bot]' && github.event_name == 'pull_request' }}
+ needs: [test, checks, build]
+ permissions:
+ pull-requests: write
+ contents: write
+ steps:
+ - name: Dependabot metadata
+ id: metadata
+ uses: dependabot/[email protected]
+ with:
+ github-token: '${{ secrets.GITHUB_TOKEN }}'
+ - name: Approve a PR
+ run: gh pr review --approve "$PR_URL"
+ env:
+ PR_URL: ${{github.event.pull_request.html_url}}
+ GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+ - name: Enable auto-merge for Dependabot PRs
+ run: gh pr merge --auto --squash "$PR_URL"
+ env:
+ PR_URL: ${{github.event.pull_request.html_url}}
+ GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}