@@ -10,7 +10,7 @@ Extract information about the dependencies being updated by a Dependabot-generat
1010
1111## Usage instructions
1212
13- Create a workflow file that contains a step that uses:
` dependabot/[email protected] .1 ` , e.g.
13+ Create a workflow file that contains a step that uses:
` dependabot/[email protected] .2 ` , e.g.
1414
1515``` yaml
1616-- .github/workflows/dependabot-prs.yml
2222 steps :
2323 - name : Fetch Dependabot metadata
2424 id : dependabot-metadata
25- uses :
dependabot/[email protected] .1 25+ uses :
dependabot/[email protected] .2 2626 with :
2727 alert-lookup : true
2828 compat-lookup : true
9898 steps:
9999 - name: Dependabot metadata
100100 id: dependabot-metadata
101- uses: dependabot/[email protected] .1 101+ uses: dependabot/[email protected] .2 102102 - uses: actions/checkout@v3
103103 - name: Approve a PR if not already approved
104104 run: |
@@ -132,7 +132,7 @@ jobs:
132132 steps :
133133 - name : Dependabot metadata
134134 id : dependabot-metadata
135- uses :
dependabot/[email protected] .1 135+ uses :
dependabot/[email protected] .2 136136 - name : Enable auto-merge for Dependabot PRs
137137 if : ${{contains(steps.dependabot-metadata.outputs.dependency-names, 'rails') && steps.dependabot-metadata.outputs.update-type == 'version-update:semver-patch'}}
138138 run : gh pr merge --auto --merge "$PR_URL"
@@ -161,7 +161,7 @@ jobs:
161161 steps :
162162 - name : Dependabot metadata
163163 id : dependabot-metadata
164- uses :
dependabot/[email protected] .1 164+ uses :
dependabot/[email protected] .2 165165 - name : Add a label for all production dependencies
166166 if : ${{ steps.dependabot-metadata.outputs.dependency-type == 'direct:production' }}
167167 run : gh pr edit "$PR_URL" --add-label "production"
0 commit comments