4 ms·
The amount of pull requests from dependency updates can become more manageable if you enable GitHub’s Auto Merge feature[1] [1] https://docs.github.com/en/gith
by starefossen 5y ago
The amount of pull requests from dependency updates can become more manageable if you enable GitHub’s Auto Merge feature[1]
[1] https://docs.github.com/en/github/collaborating-with-pull-requests/incorporating-changes-from-a-pull-request/automatically-merging-a-pull-request https://docs.github.com/en/github/collaborating-with-pull-re...
- ilammy 5y agoExactly what you want to have: get a bot merge fixes for security issues prepared by another bot without any human oversight. Then let Copilot add features to your software automatically as well.
- dmitriid 5y agoYou can't enable granular auto merges: I'm fine with auto merging minor/security update PRs from dependabot. Not anything else. You can't set up that.
- starefossen 5y agoYou could probably use a GitHub Action and check the API for author of the pull request if you want to require additional verification. If have done something similar with auto accepting docs-only pull requests in the past.
- asciimike 5y agoDependabot PM here: We've provided an action that will provide metadata (e.g. semver bump) that you can use to enable granular automerge. See https://github.com/dependabot/fetch-metadata/#enabling-auto-merge https://github.com/dependabot/fetch-metadata/#enabling-auto-... for an example.