Rework dependabot auto-merge mechanism/workflow

.github/dependabot.yml

@@ -1,5 +1,12 @@
 version: 2
 updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    assignees:
+      - ylabonte
+
   - package-ecosystem: "pip"
     directory: "/"
     schedule:

.github/workflows/automerge.yml

@@ -3,31 +3,25 @@ name: "Auto-Merge Dependabot PRs"
 on:
   pull_request:
     branches:
-      - master
+      - "main"
 
 permissions:
-  actions: read
-  security-events: write
   contents: write
   pull-requests: write
 
 jobs:
-  lint:
-    name: "Run CI Workflow"
-    uses: ./.github/workflows/pylint.yml
-  test:
-    name: "Run CI Workflow"
-    uses: ./.github/workflows/unittest.yml
   automerge:
-    name: "Auto-merge PR (Dependabot only!)"
-    needs:
-      - lint
-      - test
+    name: "Auto-approve PR"
     runs-on: ubuntu-latest
-    if: github.actor == 'dependabot[bot]'
+    if: github.actor == 'dependabot[bot]' || github.actor == 'ylabonte'
     steps:
-      - name: "Auto-merge the PRs"
-        run: gh pr merge --auto --merge "$PR_URL"
+      - name: "Approve PR to enable auto-merge"
+        run: gh pr review --approve "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
+      - name: "Auto-merge PR"
+        run: gh pr merge --merge --auto "$PR_URL"
         env:
           PR_URL: ${{github.event.pull_request.html_url}}
           GH_TOKEN: ${{secrets.GITHUB_TOKEN}}

.github/workflows/pylint.yml

@@ -2,6 +2,7 @@ name: Lint
 
 on:
   push:
+  pull_request:
   workflow_call:
 
 jobs:

.github/workflows/unittest.yml

@@ -2,6 +2,7 @@ name: Unittest
 
 on:
   push:
+  pull_request:
   workflow_call:
 
 jobs: