implement auto merging dependabot PR (#75)

.github/workflows/pull_request.yml

@@ -45,3 +45,17 @@ jobs:
     permissions:
       contents: read
     uses: ./.github/workflows/server-app.yml
+
+  # dependabotが作成したPull Requestを自動マージする
+  auto-merge-dependabot-pr:
+    needs: check-workflows
+    if: github.actor == 'dependabot[bot]'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    steps:
+      - uses: actions/checkout@v4
+      - run: gh pr merge "${GITHUB_HEAD_REF}" --merge --squash --auto

.github/workflows/push-main.yml

@@ -28,11 +28,15 @@ jobs:
   deploy:
     needs: check-workflows
     if: ${{ !contains(github.event.head_commit.message, '[No Deploy]') && !contains(toJson(github.event.commits.*.author.name), 'dependabot') }}
-    permissions:
-      id-token: write
-      contents: read
-    secrets: inherit
-    uses: ./.github/workflows/deploy.yml
+    #dependabotの実験のため、一時的にデプロイを無効
+    #permissions:
+    #  id-token: write
+    #  contents: read
+    #secrets: inherit
+    #uses: ./.github/workflows/deploy.yml
+    runs-on: ubuntu-latest
+    steps:
+      - run: echo hello
 
   # サーバアプリケーションのビルドする
   build-server-app: