diff --git a/.github/workflows/dependabot-changesets.yml b/.github/workflows/dependabot-changesets.yml new file mode 100644 index 0000000..c3efc07 --- /dev/null +++ b/.github/workflows/dependabot-changesets.yml @@ -0,0 +1,25 @@ +# Enable auto-merge for Dependabot PRs for minor and patch +# Based off of https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions#enable-auto-merge-on-a-pull-request +name: Create changesets for Dependabot +on: pull_request + +permissions: + contents: write + pull-requests: write + +jobs: + dependabot: + runs-on: ubuntu-latest + if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'FortnoxAB/changesets-java' + steps: + - name: Dependabot metadata + id: metadata + uses: dependabot/fetch-metadata@v2 + with: + skip-verification: true + - name: Debug + shell: bash + run: | + echo "dependency-names: ${{ steps.dependabot-metadata.outputs.dependency-names }}" + echo "new-version: ${{ steps.dependabot-metadata.outputs.new-version }}" + echo "${{ toJSON(steps.metadata.outputs) }}" diff --git a/pom.xml b/pom.xml index 7282c6e..d7b5ef9 100644 --- a/pom.xml +++ b/pom.xml @@ -328,7 +328,7 @@ org.sonatype.central central-publishing-maven-plugin - 0.7.0 + 0.8.0 true central