Merge pull request #23 from staticdev/dependabot

Dependabot

Author: Thiago C. D'Ávila

.dependabot/config.yml

@@ -0,0 +1,20 @@
+version: 1
+update_configs:
+  - package_manager: "python"
+    directory: "/.github/workflows"
+    update_schedule: "daily"
+    allowed_updates:
+      - match:
+          update_type: "all"
+  - package_manager: "python"
+    directory: "/"
+    update_schedule: "daily"
+    allowed_updates:
+      - match:
+          update_type: "all"
+  - package_manager: "github_actions"
+    directory: "/"
+    update_schedule: "daily"
+    allowed_updates:
+      - match:
+          update_type: "all"

.github/workflows/dependabot.yml

@@ -0,0 +1,22 @@
+name: Dependabot
+
+on:
+  pull_request:
+    branches:
+      - master
+
+jobs:
+  automerge:
+    name: Merge Dependabot pull request
+    runs-on: ubuntu-latest
+    if: github.base_ref == 'master' && (github.actor == 'dependabot[bot]' || github.actor == 'dependabot-preview[bot]')
+    steps:
+      - uses: actions/[email protected]
+        with:
+          github-token: ${{github.token}}
+          script: |
+            github.pullRequests.merge({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              pull_number: context.payload.pull_request.number
+            })