buluma/Auto Merge Dependabot Updates
Automatically merge a PR that only contains dependabot updates, based on some rules.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| repo-token | GitHub API token | — | ${{ github.token }} |
| allowed-actors | Comma separated list of usernames auto merge is allowed for. | yes | — |
| allowed-update-types | Comma separated list of types of updates that are allowed. Supported: [devDependencies|dependencies]:[major|minor|patch] | — | devDependencies:minor, devDependencies:patch |
| approve | Automatically approve the PR if it qualifies for auto merge. | — | true |
| merge | Merge the PR if it qualifies | — | true |
| merge-method | Merge method to use. Supported: "merge", "squash", "rebase". | — | merge |
| package-block-list | Comma separated list of packages that auto merge should not be allowed for. | no | — |
| package-allow-list | Comma separated list of packages that auto merge should only be allowed for. Omit to allow all packages. | no | — |
| extra-allowed-files | Comma separated list of additional files that are allowed to be modified in the PR (e.g., "src/__mocks__/@actions/core.ts"). | no | — |
| allow-github-actions-workflow-updates | Allow modified workflow files under .github/workflows/*.yml and .yaml. | no | false |
| allowed-workflow-files | Comma separated list of workflow files allowed to change when allow-github-actions-workflow-updates is true (e.g., ".github/workflows/ci.yml"). Omit to allow any workflow file. | no | — |
| allow-prerelease-updates | Allow dependency updates where either old or new version is a prerelease (contains a hyphen suffix). | no | false |
Outputs
| name | description |
|---|---|
| success | "true" if the commit meets the criteria |