Automatically merge dependabot PRs (#205)

* Automatically merge dependabot PRs

* Make ubcsailbotsoftware a code owner

.github/CODEOWNERS

@@ -5,4 +5,4 @@
 # the repo. Unless a later match takes precedence,
 # these owners will be requested for
 # review when someone opens a pull request.
-* @patrick-5546
+* @ubcsailbotsoftware @patrick-5546

.github/workflows/test_definitions.yml

@@ -37,6 +37,10 @@ on:
  PAT_TOKEN:
  required: false
 
+permissions:
+ contents: write
+ pull-requests: write
+
 jobs:
  # Adapted from https://github.com/actions/toolkit/issues/1264#issuecomment-1770928498
  extract-metadata:
@@ -192,3 +196,22 @@ jobs:
  gh run watch --exit-status -R UBCSailbot/sailbot_workspace $(gh run list -R UBCSailbot/sailbot_workspace -w tests.yml -L1 --json databaseId --jq '.[0].databaseId')
  env:
  GH_TOKEN: ${{ secrets.PAT_TOKEN }}
+
+ # Merges Dependabot PRs
+ # https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions
+ merge-dependabot-pr:
+ runs-on: ubuntu-latest
+ if: github.actor == 'dependabot[bot]'
+ steps:
+ - name: Fetch metadata
+ id: metadata
+ uses: dependabot/fetch-metadata@v1
+ with:
+ github-token: "${{ secrets.PAT_TOKEN }}"
+ - name: Enable auto-merge and approve PR
+ run: |
+ gh pr merge --auto --merge "$PR_URL"
+ gh pr review --approve "$PR_URL"
+ env:
+ PR_URL: ${{github.event.pull_request.html_url}}
+ GITHUB_TOKEN: ${{secrets.PAT_TOKEN}}