From ee5303a09aa0234c9cf69e5e8b0533ba5807fdea Mon Sep 17 00:00:00 2001
From: ktong <kuisong.tong@gmail.com>
Date: Mon, 22 Jan 2024 20:18:30 -0800
Subject: [PATCH] auto merge dependentbot PRs

---
 .github/codecov.yml              | 30 +++++++++---------------------
 .github/dependabot.yml           |  8 ++++++++
 .github/workflows/dependabot.yml | 18 ------------------
 3 files changed, 17 insertions(+), 39 deletions(-)

diff --git a/.github/codecov.yml b/.github/codecov.yml
index 4e300f3c..ff0b0bc0 100644
--- a/.github/codecov.yml
+++ b/.github/codecov.yml
@@ -2,28 +2,16 @@ codecov:
   require_ci_to_pass: true
 
 coverage:
+  precision: 1
+  round: down
+  range: "70...100"
   status:
     project:
-      default: false
+      default:
+        target: auto
+        threshold: 0.5%
 
 comment:
-  layout: "header, diff, components, files"
-
-component_management:
-  default_rules:
-    statuses:
-      - type: project
-        target: auto
-        branches:
-          - "!main"
-  individual_components:
-    - component_id: konf
-      paths:
-        - "!provider/pflag/"
-        - "!provider/file/"
-    - component_id: file
-      paths:
-        - "provider/file/"
-    - component_id: pflag
-      paths:
-        - "provider/pflag/"
+  layout: "reach,diff,flags,tree"
+  behavior: default
+  require_changes: true
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index efa7f49d..9bef3d4c 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -3,20 +3,28 @@ version: 2
 updates:
   - package-ecosystem: gomod
     directory: /
+    labels:
+      - Skip-Changelog
     schedule:
       interval: daily
 
   - package-ecosystem: gomod
     directory: /provider/file
+    labels:
+      - Skip-Changelog
     schedule:
       interval: daily
 
   - package-ecosystem: gomod
     directory: /provider/pflag
+    labels:
+      - Skip-Changelog
     schedule:
       interval: daily
 
   - package-ecosystem: github-actions
     directory: /
+    labels:
+      - Skip-Changelog
     schedule:
       interval: daily
diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml
index 26bc0c15..058fa9fd 100644
--- a/.github/workflows/dependabot.yml
+++ b/.github/workflows/dependabot.yml
@@ -2,7 +2,6 @@ name: Dependabot
 on: pull_request
 
 permissions:
-  contents: write
   pull-requests: write
 
 jobs:
@@ -10,24 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.actor == 'dependabot[bot]' }}
     steps:
-      - name: Dependabot metadata
-        id: metadata
-        uses: dependabot/fetch-metadata@v1
-        with:
-          github-token: "${{ secrets.GITHUB_TOKEN }}"
-      - name: Add a label for all production dependencies
-        if: ${{ steps.metadata.outputs.dependency-type == 'direct:production' }}
-        run: gh pr edit "$PR_URL" --add-label "Skip-Changelog"
-        env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
-      - name: Approve a PR
-        run: gh pr review --approve "$PR_URL"
-        env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
       - name: Enable auto-merge for Dependabot PRs
-        if: ${{contains(steps.metadata.outputs.dependency-names, 'my-dependency') && steps.metadata.outputs.update-type == 'version-update:semver-patch'}}
         run: gh pr merge --auto --merge "$PR_URL"
         env:
           PR_URL: ${{github.event.pull_request.html_url}}