Barebones default attempt; removed all details
This commit is contained in:
parent
44de14b8ca
commit
b617158a6c
1 changed files with 0 additions and 37 deletions
37
.github/dependabot.yml
vendored
37
.github/dependabot.yml
vendored
|
|
@ -9,40 +9,3 @@ updates:
|
|||
target-branch: "master"
|
||||
schedule:
|
||||
interval: "weekly"
|
||||
|
||||
# branch - v2.x
|
||||
- package-ecosystem: "maven"
|
||||
directory: "/"
|
||||
labels:
|
||||
- "dependencies"
|
||||
- "v2.x"
|
||||
target-branch: "v2.x"
|
||||
schedule:
|
||||
interval: "weekly"
|
||||
|
||||
# branch - v1.x
|
||||
- package-ecosystem: "maven"
|
||||
directory: "/"
|
||||
labels:
|
||||
- "dependencies"
|
||||
- "v1.x"
|
||||
target-branch: "v1.x"
|
||||
schedule:
|
||||
interval: "weekly"
|
||||
|
||||
#Dependabot auto-merge PRs for patch/minor versions that are related to critical vulnerabilities (maven)
|
||||
on: pull_request
|
||||
jobs:
|
||||
dependabot:
|
||||
runs-on: ubuntu-latest
|
||||
if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'owner/my_repo'
|
||||
steps:
|
||||
- name: Dependabot metadata
|
||||
id: dependabot-metadata
|
||||
uses: dependabot/fetch-metadata@v2
|
||||
- name: Enable auto-merge for Dependabot PRs
|
||||
if: steps.dependabot-metadata.outputs.cvss != '0'
|
||||
run: gh pr merge --auto --merge "$PR_URL"
|
||||
env:
|
||||
PR_URL: ${{github.event.pull_request.html_url}}
|
||||
GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
|
||||
Loading…
Reference in a new issue