dependency-updates-auto-merge.yaml

name: Dependency Updates Auto Merge

on:
  pull_request:
    types:
      - opened
      - synchronize
      - reopened
      - labeled

jobs:
  dependabot-auto-merge:
    runs-on: ubuntu-latest
    permissions:
      pull-requests: write
      contents: write
    if: contains(fromJson('["dependabot[bot]", "renovate[bot]"]'), github.event.pull_request.user.login) && contains(github.event.pull_request.labels.*.name, 'dependencies')
    steps:
      - uses: fastify/github-action-merge-dependabot@v3
        name: Auto-approve
        if: github.event.pull_request.user.login == 'dependabot[bot]'
        with:
          github-token: "${{ secrets.GITHUB_TOKEN }}"
          target: minor
          approve-only: true
      - uses: alexwilson/enable-github-automerge-action@1.0.0
        name: Enable Auto-merge
        with:
          github-token: "${{ secrets.APP_AUTOSCALER_CI_TOKEN }}"
          merge-method: "SQUASH"