luciano/amazon-kinesis-client
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Revert to previous step with fixed indentation

Browse source
This commit is contained in:
skye rogers 2025-03-24 10:10:02 -07:00
parent 3e50b84aae
commit db1052b5b7
1 changed files with 29 additions and 38 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

67
.github/dependabot.yml vendored
View file

@ -1,14 +1,14 @@
version: 2 version: 2
updates: updates:
# # branch - master # branch - master
# - package-ecosystem: "maven" - package-ecosystem: "maven"
# directory: "/" directory: "/"
# labels: labels:
# - "dependencies" - "dependencies"
# - "v3.x" - "v3.x"
# target-branch: "master" target-branch: "master"
# schedule: schedule:
# interval: "weekly" interval: "weekly"
# branch - v2.x # branch - v2.x
- package-ecosystem: "maven" - package-ecosystem: "maven"
@ -30,32 +30,23 @@ updates:
schedule: schedule:
interval: "weekly" interval: "weekly"
#Dependabot auto-merge PRs for patch/minor versions that are related to critical vulnerabilities (maven) #Dependabot auto-merge PRs for patch/minor versions that are related to critical vulnerabilities (maven)
- package-ecosystem: "maven" name: Dependabot auto-merge
directory: "/" on: pull_request
target-branch: "master" permissions:
schedule: pull-requests: write
interval: "daily" contents: write
name: Dependabot auto-merge jobs:
on: pull_request dependabot:
permissions: runs-on: ubuntu-latest
pull-requests: write if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'owner/my_repo'
contents: write steps:
jobs: - name: Dependabot metadata
dependabot: id: dependabot-metadata
runs-on: ubuntu-latest #needed? uses: dependabot/fetch-metadata@v2
if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'owner/my_repo' #edit? - name: Enable auto-merge for Dependabot PRs
steps: if: steps.dependabot-metadata.outputs.cvss != '0'
- name: Fetch Dependabot metadata run: gh pr merge --auto --merge "$PR_URL"
id: dependabot-metadata env:
uses: dependabot/fetch-metadata@v2 PR_URL: ${{github.event.pull_request.html_url}}
with: GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
alert-lookup: true
github-token: "${{ secrets.PAT_TOKEN }}"
- name: Enable auto-merge for security critical Dependabot PRs
#if: ${{contains(steps.dependabot-metadata.outputs.dependency-names, 'rails') && steps.dependabot-metadata.outputs.update-type == 'version-update:semver-patch'}}
if: steps.dependabot-metadata.outputs.cvss != '0'
run: gh pr merge --auto --merge "$PR_URL"
env:
PR_URL: ${{github.event.pull_request.html_url}}
GH_TOKEN: ${{secrets.GITHUB_TOKEN}}