added alert-lookup and github-token; removed cvss checker from auto merge if statement
This commit is contained in:
parent
e1a9df3ff1
commit
6a6389a0c8
1 changed files with 5 additions and 1 deletions
6
.github/workflows/maven.yml
vendored
6
.github/workflows/maven.yml
vendored
|
|
@ -19,8 +19,12 @@ jobs:
|
|||
- name: Dependabot metadata
|
||||
id: dependabot-metadata
|
||||
uses: dependabot/fetch-metadata@v2
|
||||
with:
|
||||
alert-lookup: true
|
||||
github-token: "${{ secrets.PAT_TOKEN }}"
|
||||
- name: Enable auto-merge for Dependabot PRs
|
||||
if: ${{steps.dependabot-metadata.outputs.cvss == 'true' || (steps.dependabot-metadata.outputs.update-type == 'version-update:semver-patch' || steps.dependabot-metadata.outputs.update-type == 'version-update:semver-minor')}}
|
||||
#if: ${{steps.dependabot-metadata.outputs.cvss == 'true' || (steps.dependabot-metadata.outputs.update-type == 'version-update:semver-patch' || steps.dependabot-metadata.outputs.update-type == 'version-update:semver-minor')}}
|
||||
if: steps.dependabot-metadata.outputs.update-type == 'version-update:semver-patch' || steps.dependabot-metadata.outputs.update-type == 'version-update:semver-minor'
|
||||
run: gh pr merge --auto --merge "$PR_URL"
|
||||
env:
|
||||
PR_URL: ${{github.event.pull_request.html_url}}
|
||||
|
|
|
|||
Loading…
Reference in a new issue