ci(workflows): update dependabot auto-merge workflow

The dependabot auto-merge workflow has been updated to use a new action and simplified logic for merging pull requests.

- **Enhancements & Refinements**:
  - Replaced `dependabot/fetch-metadata` and `peter-evans/enable-pull-request-automerge` with `fastify/github-action-merge-dependabot`
  - Simplified the workflow by removing conditional logic for update types
  - Updated the condition syntax to use explicit expression syntax
  - Added explicit `github-token` configuration for the new action
```
This commit is contained in:
sankalp committed 2025-12-24 23:04:36 +05:45
1 parent d1e77b5547
commit 5c6888ff28
1 file changed
+4 -11
+4 -11
View File
@@ -10,18 +10,11 @@ permissions:
jobs:
dependabot:
if: github.actor == 'dependabot[bot]'
if: ${{github.actor == 'dependabot[bot]' }}
runs-on: ubuntu-latest
steps:
- name: Fetch Dependabot metadata
id: metadata
uses: dependabot/fetch-metadata@v2
- name: Enable auto-merge (squash)
if: |
steps.metadata.outputs.update-type == 'version-update:semver-minor' ||
steps.metadata.outputs.update-type == 'version-update:semver-patch'
uses: peter-evans/enable-pull-request-automerge@v3
- name: Merge PR from dependabot
uses: fastify/github-action-merge-dependabot@v3
with:
merge-method: squash
github-token: '${{ secrets.GITHUB_TOKEN }}'