update workflow

.github/dependabot.yml

@@ -10,31 +10,10 @@ updates:
     directory: "/"
 
     schedule:
-      interval: "weekly"
-      day: "friday"
+      interval: "daily"
       time: "04:00"
       timezone: "Europe/Berlin"
 
-    groups:
-      security-updates:
-        applies-to: "security-updates"
-        patterns:
-          - "*"
-        exclude-patterns:
-          - "friendsofphp/php-cs-fixer"
-          - "sirbrillig/phpcs-variable-analysis"
-          - "slevomat/coding-standard"
-          - "squizlabs/php_codesniffer"
-      version-updates:
-        applies-to: "version-updates"
-        patterns:
-          - "*"
-        exclude-patterns:
-          - "friendsofphp/php-cs-fixer"
-          - "sirbrillig/phpcs-variable-analysis"
-          - "slevomat/coding-standard"
-          - "squizlabs/php_codesniffer"
-
     open-pull-requests-limit: 10
 
     reviewers:
@@ -54,9 +33,6 @@ updates:
       include: "scope"
       prefix: "composer"
 
-    #allow:
-    #  - '*'
-
     ignore:
       - dependency-name: "browscap/browscap"
       - dependency-name: "elasticsearch/elasticsearch"
@@ -83,92 +59,17 @@ updates:
       - dependency-name: "symfony/http-foundation"
       - dependency-name: "symfony/yaml"
 
-    # Disable rebasing for all pull requests
-    rebase-strategy: "disabled"
-
-  - package-ecosystem: "npm"
-
-    directory: "/"
-
-    schedule:
-      interval: "weekly"
-      day: "friday"
-      time: "04:00"
-      timezone: "Europe/Berlin"
-
-    groups:
-      security-updates:
-        applies-to: "security-updates"
-        patterns:
-          - "*"
-      version-updates:
-        applies-to: "version-updates"
-        patterns:
-          - "*"
-
-    open-pull-requests-limit: 10
-
-    reviewers:
-      - "mimmi20"
-
-    assignees:
-      - "mimmi20"
-
-    labels:
-      - "dependencies"
-
-    versioning-strategy: "increase"
-
-    target-branch: "master"
-
-    commit-message:
-      include: "scope"
-      prefix: "npm"
-
-    ignore:
-      - dependency-name: "@localnerve/imagemin-gifsicle"
-      - dependency-name: "@localnerve/imagemin-pngquant"
-      - dependency-name: "@node-minify/core"
-      - dependency-name: "@node-minify/no-compress"
-      - dependency-name: "@node-minify/terser"
-      - dependency-name: "@typescript-eslint/eslint-plugin"
-      - dependency-name: "@typescript-eslint/parser"
-      - dependency-name: "@typescript-eslint/typescript-estree"
-      - dependency-name: "@vheemstra/vite-plugin-imagemin"
-      - dependency-name: "@vitest/coverage-istanbul"
-      - dependency-name: "@vitest/ui"
-      - dependency-name: "cssnano"
-      - dependency-name: "cssnano-preset-default"
-      - dependency-name: "imagemin"
-      - dependency-name: "postcss-load-config"
-      - dependency-name: "supports-color"
-      - dependency-name: "vitest"
-
-    # Disable rebasing for all pull requests
-    rebase-strategy: "disabled"
+    rebase-strategy: "auto"
 
   - package-ecosystem: "github-actions"
 
     directory: "/"
 
     schedule:
-      interval: "weekly"
-      day: "friday"
+      interval: "daily"
       time: "04:00"
       timezone: "Europe/Berlin"
 
-    groups:
-      # Specify a name for the group, which will be used in pull request titles
-      # and branch names
-      security-updates:
-        applies-to: "security-updates"
-        patterns:
-          - "*"
-      version-updates:
-        applies-to: "version-updates"
-        patterns:
-          - "*"
-
     open-pull-requests-limit: 10
 
     reviewers:
@@ -185,5 +86,7 @@ updates:
     commit-message:
       prefix: "github-actions"
 
-    # Disable rebasing for all pull requests
-    rebase-strategy: "disabled"
+    ignore:
+      - dependency-name: "mimmi20/ci"
+
+    rebase-strategy: "auto"

.github/workflows/auto-approve.yml

@@ -0,0 +1,19 @@
+name: "Auto approve"
+
+on:
+  - pull_request_target
+
+jobs:
+  auto-approve:
+    runs-on: "ubuntu-24.04"
+
+    if: ${{ github.actor == 'dependabot[bot]' }}
+
+    permissions:
+      pull-requests: write
+
+    steps:
+      - uses: "fastify/github-action-merge-dependabot@v3"
+        with:
+          approve-only: true
+          github-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/auto-merge.yml

@@ -0,0 +1,21 @@
+name: "Auto merge"
+
+on:
+  - pull_request_target
+
+jobs:
+  automerge:
+    runs-on: "ubuntu-24.04"
+
+    if: ${{ github.actor == 'dependabot[bot]' }}
+
+    permissions:
+      pull-requests: write
+      contents: write
+
+    steps:
+      - uses: "fastify/github-action-merge-dependabot@v3"
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          use-github-auto-merge: true
+          merge-method: "merge"