Revert to previous step with fixed indentation

This commit is contained in:
skye rogers 2025-03-24 10:10:02 -07:00
parent 3e50b84aae
commit db1052b5b7

View file

@ -1,14 +1,14 @@
version: 2
updates:
# # branch - master
# - package-ecosystem: "maven"
# directory: "/"
# labels:
# - "dependencies"
# - "v3.x"
# target-branch: "master"
# schedule:
# interval: "weekly"
# branch - master
- package-ecosystem: "maven"
directory: "/"
labels:
- "dependencies"
- "v3.x"
target-branch: "master"
schedule:
interval: "weekly"
# branch - v2.x
- package-ecosystem: "maven"
@ -30,32 +30,23 @@ updates:
schedule:
interval: "weekly"
#Dependabot auto-merge PRs for patch/minor versions that are related to critical vulnerabilities (maven)
- package-ecosystem: "maven"
directory: "/"
target-branch: "master"
schedule:
interval: "daily"
name: Dependabot auto-merge
on: pull_request
permissions:
pull-requests: write
contents: write
jobs:
dependabot:
runs-on: ubuntu-latest #needed?
if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'owner/my_repo' #edit?
steps:
- name: Fetch Dependabot metadata
id: dependabot-metadata
uses: dependabot/fetch-metadata@v2
with:
alert-lookup: true
github-token: "${{ secrets.PAT_TOKEN }}"
- name: Enable auto-merge for security critical Dependabot PRs
#if: ${{contains(steps.dependabot-metadata.outputs.dependency-names, 'rails') && steps.dependabot-metadata.outputs.update-type == 'version-update:semver-patch'}}
if: steps.dependabot-metadata.outputs.cvss != '0'
run: gh pr merge --auto --merge "$PR_URL"
env:
PR_URL: ${{github.event.pull_request.html_url}}
GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
#Dependabot auto-merge PRs for patch/minor versions that are related to critical vulnerabilities (maven)
name: Dependabot auto-merge
on: pull_request
permissions:
pull-requests: write
contents: write
jobs:
dependabot:
runs-on: ubuntu-latest
if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'owner/my_repo'
steps:
- name: Dependabot metadata
id: dependabot-metadata
uses: dependabot/fetch-metadata@v2
- name: Enable auto-merge for Dependabot PRs
if: steps.dependabot-metadata.outputs.cvss != '0'
run: gh pr merge --auto --merge "$PR_URL"
env:
PR_URL: ${{github.event.pull_request.html_url}}
GH_TOKEN: ${{secrets.GITHUB_TOKEN}}