From 13f91ce1acc6fed811938648acdb87ac575337f0 Mon Sep 17 00:00:00 2001 From: Scott Andrews Date: Tue, 16 Jun 2026 19:35:22 -0400 Subject: [PATCH] Auto-merge Dependabot PRs PRs bumping the wasmtime version will be automatically merged. Branch protection rules require that the tests pass before actual merge. Signed-off-by: Scott Andrews --- .github/workflows/dependabot-auto-merge.yml | 24 +++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 .github/workflows/dependabot-auto-merge.yml diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml new file mode 100644 index 0000000..5f7c951 --- /dev/null +++ b/.github/workflows/dependabot-auto-merge.yml @@ -0,0 +1,24 @@ +# Automatically approve and merge Dependabot PRs for minor and patch updates +# derived from https://lethain.com/dependabot-auto-merge/ +name: Dependabot auto-merge +on: pull_request + +permissions: + contents: write + pull-requests: write + +jobs: + dependabot: + runs-on: ubuntu-latest + if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'componentized/wasmtime' + steps: + - name: Dependabot metadata + id: metadata + uses: dependabot/fetch-metadata@v2 + with: + github-token: "${{ secrets.GITHUB_TOKEN }}" + - name: Set PR to auto-merge + if: steps.metadata.outputs.update-type == 'version-update:semver-patch' && steps.metadata.outputs.dependency-name == 'wasmtime-cli' + run: gh pr merge --auto --squash "${{ github.event.pull_request.html_url }}" + env: + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}