feat(ci): add a workflow to auto-merge a Dependabot PR (#183)

* chore(ci): rename check commit workflow

* feat(ci): add a workflow to auto-merge dependabot PRs

.github/workflows/check-commit.yml

@@ -1,4 +1,4 @@
-name: "🤖 Check: 'gdenv'"
+name: "🤖 Check: Commit"
 
 on:
   pull_request:

.github/workflows/merge-dependabot-pr.yml

@@ -0,0 +1,36 @@
+name: "🤖 Merge: Dependabot PR"
+
+on:
+  pull_request:
+    branches:
+      - main
+
+permissions:
+  contents: write
+
+env:
+  # This is required to use the 'gh' CLI in actions.
+  GH_TOKEN: ${{ github.token }}
+
+jobs:
+  # See https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions#enable-auto-merge-on-a-pull-request.
+  dependabot:
+    if: |
+      github.event_name == 'pull_request' &&
+      github.actor == 'dependabot[bot]'
+
+    runs-on: ubuntu-latest
+    timeout-minutes: 1
+
+    steps:
+      - name: Dependabot metadata
+        id: metadata
+        uses: dependabot/fetch-metadata@v1
+        with:
+          github-token: "${{ secrets.GITHUB_TOKEN }}"
+
+      - name: Enable auto-merge for Dependabot PRs
+        if: |
+          contains(steps.metadata.outputs.dependency-names, 'my-dependency') && 
+          steps.metadata.outputs.update-type == 'version-update:semver-minor'
+        run: gh pr merge --auto --merge "${{ github.event.pull_request.html_url }}"