Merge pull request #235 from wix-incubator/fer0x/auto-merge-dependabot

ci: auto-merge Dependabot PRs

.github/CODEOWNERS

@@ -3,3 +3,6 @@
 
 # configs
 .github @denysdovhan
+
+# Hack for Dependabot - do not assign any reviewer automatically
+yarn.lock

.github/dependabot.yml

@@ -10,9 +10,15 @@ updates:
   - package-ecosystem: 'npm'
     directory: '/'
     schedule:
-      interval: 'monthly'
-    open-pull-requests-limit: 10
+      interval: 'daily'
+    open-pull-requests-limit: 25
     ignore:
       # Ignore major updates for npm packages
       - dependency-name: '*'
         update-types: ['version-update:semver-major']
+  # Maintain dependencies for GitHub Actions
+  - package-ecosystem: 'github-actions'
+    directory: '/'
+    schedule:
+      interval: 'daily'
+    open-pull-requests-limit: 25

.github/workflows/ci.yaml

@@ -3,6 +3,10 @@ on:
   push:
   pull_request:
 
+permissions:
+  contents: write
+  pull-requests: write
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
@@ -26,3 +30,20 @@ jobs:
 
       - name: 🧪 Run Tests
         run: yarn test
+
+  dependabot:
+    name: Dependabot auto-merge
+    needs: [validate]
+    runs-on: ubuntu-latest
+    if: ${{ github.actor == 'dependabot[bot]' && github.event_name == 'pull_request'}}
+    steps:
+      - name: Dependabot metadata
+        id: metadata
+        uses: dependabot/fetch-metadata@v1
+        with:
+          github-token: '${{ secrets.GITHUB_TOKEN }}'
+      - name: Enable auto-merge for Dependabot PRs
+        run: gh pr merge --auto --merge "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}