-
-
Notifications
You must be signed in to change notification settings - Fork 2.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Auto-approve depend-a-bot-PRs #7332
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you please add this to the auto-merge workflow: https://github.com/JabRef/jabref/blob/master/.github/workflows/automerge.yml
.github/workflows/automerge.yml
Outdated
@@ -15,6 +15,11 @@ jobs: | |||
checkInterval: 13 | |||
env: | |||
GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}" | |||
- name: Auto approve | |||
uses: hmarr/auto-approve-action@v2.0.0 | |||
if: github.actor == 'dependabot[bot]' || github.actor == 'dependabot-preview[bot]' && steps.waitforstatuschecks.outputs.status == 'success' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The first two checks should be for the whole job (and the first is already, see line 8).
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Took me a while to understand the comment. With some patience, I did. fixed.
* upstream/master: Bump pascalgn/automerge-action from v0.13.0 to v0.13.1 (#7445) Auto-approve depend-a-bot-PRs (#7332) Clarify that changelog is user-facing Remove unmaintained AUTHORS file Fixes the issue "Non valid number as font size results in an uncaught exception." (#7438) Zbmath fetcher (#7440) Bump me.champeau.gradle.jmh from 0.5.2 to 0.5.3 (#7444) Bump styfle/cancel-workflow-action from 0.7.0 to 0.8.0 (#7446)
We currently had issues that the
master
branch gets pushed to accidently or that failing PRs are merged. Thus, we reconfigured the master branch:That leads that #dependabot PRs need to be approved: #7331
This is additional overhead. If we want to keep the protection (which I think, we should to prevent accidental merges causing additional effort), we need auto-approve: https://github.com/hmarr/auto-approve-action
This PR adds this.