From b617158a6cd61426f99451958894e9e41f0c0ca0 Mon Sep 17 00:00:00 2001 From: skye rogers Date: Mon, 24 Mar 2025 10:19:52 -0700 Subject: [PATCH] Barebones default attempt; removed all details --- .github/dependabot.yml | 37 ------------------------------------- 1 file changed, 37 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index e50ac91d..66ea1588 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -9,40 +9,3 @@ updates: target-branch: "master" schedule: interval: "weekly" - - # branch - v2.x - - package-ecosystem: "maven" - directory: "/" - labels: - - "dependencies" - - "v2.x" - target-branch: "v2.x" - schedule: - interval: "weekly" - - # branch - v1.x - - package-ecosystem: "maven" - directory: "/" - labels: - - "dependencies" - - "v1.x" - target-branch: "v1.x" - schedule: - interval: "weekly" - -#Dependabot auto-merge PRs for patch/minor versions that are related to critical vulnerabilities (maven) -on: pull_request -jobs: - dependabot: - runs-on: ubuntu-latest - if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'owner/my_repo' - steps: - - name: Dependabot metadata - id: dependabot-metadata - uses: dependabot/fetch-metadata@v2 - - name: Enable auto-merge for Dependabot PRs - if: steps.dependabot-metadata.outputs.cvss != '0' - run: gh pr merge --auto --merge "$PR_URL" - env: - PR_URL: ${{github.event.pull_request.html_url}} - GH_TOKEN: ${{secrets.GITHUB_TOKEN}} \ No newline at end of file