{"repo":"tjenkinson/gh-action-auto-merge-dependency-updates","free":true,"listed":false,"github":"https://github.com/tjenkinson/gh-action-auto-merge-dependency-updates","clone":"git clone https://github.com/tjenkinson/gh-action-auto-merge-dependency-updates.git","description":"A GitHub action that will automatically approve and merge a PR that only contains dependency updates, based on some rules. Also possible to disable the merge and use the `success` output to use in combination with other actions.","language":"TypeScript","stars":20,"topics":["action","gh-action","updater","dependency","dependabot","security","automation","merge","automerge"],"license":"MIT","category":"security-tools","readme_excerpt":"gh-action-auto-merge-dependency-updates A GitHub action that will automatically approve and merge a PR that only contains dependency updates, based on some rules. If you run tests on PR's make sure you configure those as required status checks so that they need to go green before the merge can occur. Note that the action does not check the lockfile is valid, so you should only set allowed-actors you trust, or validate that the lockfile is correct in another required action. It currently supports npm and yarn. By default this action will poll the API and wait for all status checks to pass which is not very efficient. It's recommended that you: - Enable auto merge on your repo - Enable the use-auto-merge option in the action - Configure this action as a required status check - This is so that if a PR is updated and auto merge needs disabling, the PR cannot auto merge before that happens Config - use-auto-merge : \\[Recommended\\] Enable GitHub auto merge on the PR and exit instead of waiting for the checks to complete and merging. Auto merge must be enabled on the repo, and you should make sure this is a required status check. Default: false - allowed-actors : A comma separated list of usernames auto merge is allowed for. - repo-token (optional): a GitHub API token. Default: The token provided to the workflow ( ${{ github.token }} ) - allowed-update-types (optional): A comma separated list of types of updates that are allowed. Supported: [devDependencies dependencies]:[major mino","default_branch":null,"files":null,"tree":[],"storefront":"/r/tjenkinson","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/tjenkinson/gh-action-auto-merge-dependency-updates/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}