merge-dependabot.yaml

# tag::license[]
#
# Copyright (C) 2024 Piotr P. Karwasz
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
# end::license[]
name: merge-dependabot

on:
  pull_request_target:

permissions: read-all

jobs:

  build:
    if: github.repository == 'copernik-eu/log4j-tomcat' && github.actor == 'dependabot[bot]'
    uses: copernik-eu/log4j-tomcat/.github/workflows/build-reusable.yaml@main
    secrets:
      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

  merge:
    needs: build
    runs-on: ubuntu-latest

    permissions:
      contents: write

    steps:

      - name: Checkout repository
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683   # 4.2.2
        with:
          fetch-depth: 32
          fetch-tags: false
          ref: ${{ github.head_ref }}

      - name: Setup GPG
        id: setup-gpg
        uses: crazy-max/ghaction-import-gpg@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5 # 6.2.0
        with:
          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
          git_user_signingkey: true
          git_commit_gpgsign: true

      - name: Automatically merge
        env:
          BASE: ${{ github.base_ref }}
        run: |
          git fetch origin "+refs/heads/$BASE:refs/remotes/origin/$BASE"
          git rebase "origin/$BASE"
          git push origin "HEAD:$BASE"
          # Push the PR branch
          git push -f