diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..8a82af7 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,30 @@ +version: 2 +updates: + - package-ecosystem: "gradle" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + groups: + gradle-deps: + update-types: + - "minor" + - "patch" + ignore: + - dependency-name: "*" + update-types: + - "version-update:semver-major" + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + open-pull-requests-limit: 10 + groups: + github-actions: + update-types: + - "minor" + - "patch" + ignore: + - dependency-name: "*" + update-types: + - "version-update:semver-major" \ No newline at end of file diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml new file mode 100644 index 0000000..65214c8 --- /dev/null +++ b/.github/workflows/dependabot.yml @@ -0,0 +1,18 @@ +name: Dependabot Auto Merge + +on: + pull_request_target: + +permissions: + contents: write + pull-requests: write + +jobs: + dependabot: + if: github.actor == 'dependabot[bot]' + runs-on: ubuntu-latest + steps: + - uses: fastify/github-action-merge-dependabot@v3 + with: + github-token: ${{ secrets.GITHUB_TOKEN }} + merge-method: squash \ No newline at end of file