Skip to content

deps: update ruff requirement from >=0.16.4 to >=0.16.5 #95

deps: update ruff requirement from >=0.16.4 to >=0.16.5

deps: update ruff requirement from >=0.16.4 to >=0.16.5 #95

name: Auto-merge Dependabot
on:
pull_request:
permissions:
contents: write
pull-requests: write
env:
FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
jobs:
auto-merge:
runs-on: ubuntu-latest
if: github.actor == 'dependabot[bot]'
steps:
- name: Fetch Dependabot metadata
id: metadata
uses: dependabot/fetch-metadata@v3
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
- name: Approve PR
if: steps.metadata.outputs.update-type == 'version-update:semver-patch'
run: gh pr review --approve "$PR_URL"
env:
PR_URL: ${{ github.event.pull_request.html_url }}
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
# Note: PRs that modify .github/workflows/ files cannot be auto-merged
# with GITHUB_TOKEN due to GitHub security restrictions. Those need manual merge.
- name: Enable auto-merge
if: steps.metadata.outputs.update-type == 'version-update:semver-patch'
run: gh pr merge --auto --squash "$PR_URL" || echo "Auto-merge not available for this PR (may modify workflow files)"
env:
PR_URL: ${{ github.event.pull_request.html_url }}
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}