add dependabot and workflows

.github/dependabot.yml

@@ -0,0 +1,6 @@
+version: 2
+updates:
+ - package-ecosystem: "npm"
+ directory: '/'
+ schedule:
+ interval: 'weekly'

.github/workflows/pull_requests.yml

@@ -0,0 +1,45 @@
+name: PR workflow
+on: pull_request
+
+permissions:
+ pull-requests: write
+
+jobs:
+ test-build:
+ runs-on: ubuntu-latest
+ strategy:
+ matrix:
+ node-version: [ 18.x ]
+ steps:
+ - name: Checkout 🛎️
+ uses: actions/checkout@v2
+ with:
+ persist-credentials: false
+ - name: Use Node.js ${{ matrix.node-version }}
+ uses: actions/setup-node@v1
+ with:
+ node-version: ${{ matrix.node-version }}
+ - run: npm install -g gatsby-cli
+ - run: npm install -g flotiq-cli
+ - run: flotiq import . ${{ secrets.GATSBY_FLOTIQ_API_KEY }}
+ - run: yarn install
+ - run: gatsby build
+ env:
+ GATSBY_FLOTIQ_API_KEY: ${{ secrets.GATSBY_FLOTIQ_API_KEY }}
+ SNIPCART_API_KEY: 'test'
+ GA_MEASUREMENT_ID: ''
+ dependabot:
+ needs: test-build
+ runs-on: ubuntu-latest
+ if: github.actor == 'dependabot[bot]'
+ steps:
+ - name: Dependabot metadata
+ id: metadata
+ uses: dependabot/fetch-metadata@v1
+ with:
+ github-token: "${{ secrets.GITHUB_TOKEN }}"
+ - name: Approve a PR
+ run: gh pr review --approve "$PR_URL"
+ env:
+ PR_URL: ${{github.event.pull_request.html_url}}
+ GH_TOKEN: ${{secrets.GITHUB_TOKEN}}

.github/workflows/test.yml → .github/workflows/push.yml

@@ -1,5 +1,9 @@
-name: test-build
-on: push
+name: Push workflow
+on:
+ push:
+ branches:
+ - master
+ workflow_dispatch:
 jobs:
  test:
  runs-on: ubuntu-latest
@@ -22,4 +26,5 @@ jobs:
  - run: gatsby build
  env:
  GATSBY_FLOTIQ_API_KEY: ${{ secrets.GATSBY_FLOTIQ_API_KEY }}
+ SNIPCART_API_KEY: 'test'
  GA_MEASUREMENT_ID: ''