chore(deps): bump lucide-react from 1.26.0 to 1.27.0 in the prod-minor-patch group #206
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: auto-merge | |
| # Auto-merge Dependabot PRs once CI is green. Only minor and patch bumps | |
| # qualify; majors require a human review and stay open. Relies on GitHub's | |
| # native "merge when ready" — actual merge waits for required status checks | |
| # to pass and the branch protection rules to be satisfied. | |
| # | |
| # Repo prerequisite: Settings → General → Pull Requests → "Allow auto-merge" | |
| # must be enabled (one-time toggle by an admin). | |
| on: | |
| pull_request_target: | |
| types: [opened, reopened, synchronize, ready_for_review] | |
| permissions: | |
| contents: write | |
| pull-requests: write | |
| jobs: | |
| dependabot: | |
| if: github.actor == 'dependabot[bot]' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Fetch Dependabot metadata | |
| id: meta | |
| uses: dependabot/fetch-metadata@v3 | |
| with: | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Enable auto-merge for minor / patch bumps | |
| # `update-type` is "version-update:semver-{major,minor,patch}" for | |
| # single-package PRs. For grouped PRs it can be empty; the metadata | |
| # action then surfaces `dependency-group` instead, and we trust the | |
| # group config (gomod/npm/actions/docker all gate their groups on | |
| # update-types: [minor, patch]). | |
| if: | | |
| steps.meta.outputs.update-type == 'version-update:semver-minor' || | |
| steps.meta.outputs.update-type == 'version-update:semver-patch' || | |
| steps.meta.outputs.dependency-group != '' | |
| run: gh pr merge --auto --squash "$PR_URL" | |
| env: | |
| PR_URL: ${{ github.event.pull_request.html_url }} | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} |