build(deps-dev): Bump @types/node from 20.8.2 to 20.8.3 #359
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Automatically Update Dependencies | |
| # `pull_request_target` grants access to secrets and runs in the scope of the *destination* branch. | |
| # Specifically we listen for the labelled event. | |
| on: | |
| pull_request_target: | |
| types: [labeled] | |
| jobs: | |
| # Explicitly check-out & run a local version of this action. | |
| # Note: This is *not* a recommended practice, and is only done here to dogfood the action. | |
| # Please avoid running this action in a workflow which checks out code. | |
| auto-merge-dependency-updates: | |
| name: Enable auto-merge for Dependabot PRs | |
| runs-on: ubuntu-latest | |
| # Specifically check the creator of the pull-request, not the actor. | |
| if: github.event.pull_request.user.login == 'dependabot[bot]' && contains(github.event.pull_request.labels.*.name, 'dependencies') | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@master | |
| with: | |
| fetch-depth: 1 | |
| - id: enable-automerge | |
| name: Enable Github Automerge | |
| uses: ./ | |
| with: | |
| github-token: "${{ secrets.ENABLE_AUTOMERGE_ACTION_TOKEN }}" | |
| # Reference hmarr/auto-approve-action by commit SHA as it is an immutable reference to a | |
| # known, "trusted" version of this 3rd party code. | |
| # Note: This is a separate job to explicitly *not* check-out local code. | |
| auto-approve-dependency-updates: | |
| name: Approve dependabot PRs | |
| runs-on: ubuntu-latest | |
| needs: auto-merge-dependency-updates | |
| # Specifically check the creator of the pull-request, not the actor. | |
| if: github.event.pull_request.user.login == 'dependabot[bot]' && contains(github.event.pull_request.labels.*.name, 'dependencies') | |
| steps: | |
| - id: auto-approve-dependabot | |
| uses: hmarr/auto-approve-action@bca9db08da72b576ae3273e776e7ccf3f0a36e12 | |
| with: | |
| github-token: "${{ secrets.GITHUB_TOKEN }}" |