Skip to content
Dependabot auto-approve

Bump the "dependencies" group with 3 updates across multiple ecosystems #2

Sign in to view logs

Bump the "dependencies" group with 3 updates across multiple ecosystems

Bump the "dependencies" group with 3 updates across multiple ecosystems #2

Workflow file for this run

.github/workflows/dependabot-auto-approve.yml at 05c0839
name: Dependabot auto-approve

Check warning on line 1 in .github/workflows/dependabot-auto-approve.yml

View workflow run for this annotation

GitHub Actions / Dependabot auto-approve

Workflow execution policy warning (evaluate mode) 

On December 2, 2026, GitHub will restrict `pull_request_target` on public repositories by default. To continue allowing the event trigger, configure an Actions policy. Learn more: https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target
on:
pull_request_target:
types: [opened, reopened, synchronize, ready_for_review]
permissions:
pull-requests: write
jobs:
approve:
if: github.event.pull_request.user.login == 'dependabot[bot]' && !github.event.pull_request.draft
runs-on: ubuntu-latest
steps:
- name: Approve Dependabot PR
run: gh pr review "$PR_NUMBER" --approve --repo "$GH_REPO"
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
GH_REPO: ${{ github.repository }}
PR_NUMBER: ${{ github.event.pull_request.number }}