auto merge dependentbot PRs

nil-go · Jan 23, 2024 · ee5303a · ee5303a
1 parent ef74c14
commit ee5303a
Show file tree

Hide file tree

Showing 3 changed files with 17 additions and 39 deletions.
diff --git a/.github/codecov.yml b/.github/codecov.yml
@@ -2,28 +2,16 @@ codecov:
   require_ci_to_pass: true
 
 coverage:
+  precision: 1
+  round: down
+  range: "70...100"
   status:
     project:
-      default: false
+      default:
+        target: auto
+        threshold: 0.5%
 
 comment:
-  layout: "header, diff, components, files"
-
-component_management:
-  default_rules:
-    statuses:
-      - type: project
-        target: auto
-        branches:
-          - "!main"
-  individual_components:
-    - component_id: konf
-      paths:
-        - "!provider/pflag/"
-        - "!provider/file/"
-    - component_id: file
-      paths:
-        - "provider/file/"
-    - component_id: pflag
-      paths:
-        - "provider/pflag/"
+  layout: "reach,diff,flags,tree"
+  behavior: default
+  require_changes: true
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -3,20 +3,28 @@ version: 2
 updates:
   - package-ecosystem: gomod
     directory: /
+    labels:
+      - Skip-Changelog
     schedule:
       interval: daily
 
   - package-ecosystem: gomod
     directory: /provider/file
+    labels:
+      - Skip-Changelog
     schedule:
       interval: daily
 
   - package-ecosystem: gomod
     directory: /provider/pflag
+    labels:
+      - Skip-Changelog
     schedule:
       interval: daily
 
   - package-ecosystem: github-actions
     directory: /
+    labels:
+      - Skip-Changelog
     schedule:
       interval: daily
diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml
@@ -2,32 +2,14 @@ name: Dependabot
 on: pull_request
 
 permissions:
-  contents: write
   pull-requests: write
 
 jobs:
   dependabot:
     runs-on: ubuntu-latest
     if: ${{ github.actor == 'dependabot[bot]' }}
     steps:
-      - name: Dependabot metadata
-        id: metadata
-        uses: dependabot/fetch-metadata@v1
-        with:
-          github-token: "${{ secrets.GITHUB_TOKEN }}"
-      - name: Add a label for all production dependencies
-        if: ${{ steps.metadata.outputs.dependency-type == 'direct:production' }}
-        run: gh pr edit "$PR_URL" --add-label "Skip-Changelog"
-        env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
-      - name: Approve a PR
-        run: gh pr review --approve "$PR_URL"
-        env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
       - name: Enable auto-merge for Dependabot PRs
-        if: ${{contains(steps.metadata.outputs.dependency-names, 'my-dependency') && steps.metadata.outputs.update-type == 'version-update:semver-patch'}}
         run: gh pr merge --auto --merge "$PR_URL"
         env:
           PR_URL: ${{github.event.pull_request.html_url}}