Skip to content

chore(deps-dev): bump nodeenv from 1.9.1 to 1.10.0 #200

chore(deps-dev): bump nodeenv from 1.9.1 to 1.10.0

chore(deps-dev): bump nodeenv from 1.9.1 to 1.10.0 #200

name: Dependabot Auto-Merge
on:
pull_request:
types: [opened, synchronize, reopened]
permissions:
contents: write
pull-requests: write
jobs:
auto-merge:
runs-on: ubuntu-latest
if: github.actor == 'dependabot[bot]'
steps:
- name: Dependabot metadata
id: metadata
uses: dependabot/fetch-metadata@v2.4.0
with:
github-token: "${{ secrets.GITHUB_TOKEN }}"
- name: Auto-merge for patch and minor updates
if: ${{ steps.metadata.outputs.update-type == 'version-update:semver-patch' || steps.metadata.outputs.update-type == 'version-update:semver-minor' }}
run: |
echo "Auto-merging ${{ steps.metadata.outputs.dependency-names }}"
gh pr merge --auto --merge "$PR_URL"
env:
PR_URL: ${{ github.event.pull_request.html_url }}
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Enable auto-merge for GitHub Actions updates
if: ${{ steps.metadata.outputs.package-ecosystem == 'github_actions' }}
run: |
echo "Auto-merging GitHub Actions update for ${{ steps.metadata.outputs.dependency-names }}"
gh pr merge --auto --merge "$PR_URL"
env:
PR_URL: ${{ github.event.pull_request.html_url }}
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Comment on major version updates
if: ${{ steps.metadata.outputs.update-type == 'version-update:semver-major' }}
run: |
gh pr comment "$PR_URL" --body "🚨 **Major version update detected!**
This PR contains major version updates that may include breaking changes:
- **${{ steps.metadata.outputs.dependency-names }}**
Please review carefully before merging. Consider:
- Reading the changelog/release notes
- Testing locally
- Checking for breaking changes
This PR will **NOT** be auto-merged due to the major version change."
env:
PR_URL: ${{ github.event.pull_request.html_url }}
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}