Skip to content

feat: add dependabot #8

feat: add dependabot

feat: add dependabot #8

Workflow file for this run

name: Tests and Dependabot PR Handling
on:
pull_request:
branches:
- master
- main
jobs:
# Verifies the boilerplate can start and run in GitHub Actions environment
test-for-workflow:
name: Alva test workflow
uses: DevSkillsHQ/publish-test-results-workflow/.github/workflows/publish-test-results.yml@main
# Verifies the boilerplate can start and run in codespace environment
test-for-codespaces:
runs-on: ubuntu-20.04
permissions:
contents: read
packages: read
container:
image: ghcr.io/devskillshq/boilerplate-base-image:latest
credentials:
username: ${{ github.actor }}
password: ${{ secrets.github_token }}
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Install jq
run: sudo apt-get install jq
- name: Fetch apiUrl
run: |
apiUrl=$(grep "apiUrl:" cypress.config.js | awk -F": " '{print $2}' | tr -d "'," || echo "")
if [[ ! -z "$apiUrl" ]]; then
apiUrl="$apiUrl/ping"
fi
echo "apiUrl=$apiUrl" >> $GITHUB_ENV
shell: bash
# Running tests for all challenges except Backend.
- name: Run tests without waiting on API
if: env.apiUrl == ''
uses: cypress-io/github-action@v5
with:
build: npm run build
start: npm run start
- name: Run tests with waiting on API
if: env.apiUrl != ''
uses: cypress-io/github-action@v5
with:
build: npm run build
start: npm run start
wait-on: ${{ env.apiUrl }}
check-dependabot:
needs:
- test-for-workflow
- test-for-codespaces
runs-on: ubuntu-20.04
outputs:
is_dependabot_pr: ${{ steps.dependabot-check.outputs.is_dependabot_pr }}
steps:
- id: dependabot-check
name: Check if PR is from Dependabot
run: |
echo "PR author: ${{ github.event.pull_request.user.login }}"
if [[ "${{ github.event.pull_request.user.login }}" == "dependabot[bot]" || "${{ github.event.pull_request.user.login }}" == "dependabot-preview[bot]" ]]; then
echo "::set-output name=is_dependabot_pr::true"
else
echo "::set-output name=is_dependabot_pr::false"
fi
auto-merge:
needs: check-dependabot
runs-on: ubuntu-20.04
if: ${{ needs.check-dependabot.outputs.is_dependabot_pr == 'true' }}
steps:
- name: Merge pull request
uses: actions/github-script@v5
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
const pull_number = context.payload.pull_request.number;
await github.rest.pulls.merge({
owner: context.repo.owner,
repo: context.repo.repo,
pull_number: pull_number
});
- name: Delete branch
uses: actions/github-script@v5
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
const branch_name = context.payload.pull_request.head.ref;
await github.rest.git.deleteRef({
owner: context.repo.owner,
repo: context.repo.repo,
ref: 'heads/' + branch_name
});