diff --git a/.github/workflows/dependabot-post.yml b/.github/workflows/dependabot.yml similarity index 85% rename from .github/workflows/dependabot-post.yml rename to .github/workflows/dependabot.yml index 453305f5d..3382afb51 100644 --- a/.github/workflows/dependabot-post.yml +++ b/.github/workflows/dependabot.yml @@ -53,3 +53,17 @@ jobs: commit_author: "github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>" # Do not overwrite in case our version is outdated push_options: "--force-with-lease" + + auto-merge: + if: github.actor == 'dependabot[bot]' + runs-on: ubuntu-latest + permissions: + contents: write + pull-requests: write + steps: + # NOTE Auto-merge is blocked until branch protection rules are fulfilled + - name: Enable auto-merge for Dependabot PRs + run: gh pr merge --auto --merge "$PR_URL" + env: + PR_URL: ${{github.event.pull_request.html_url}} + GH_TOKEN: ${{secrets.GITHUB_TOKEN}}