diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..9c8d2902f --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,25 @@ +version: 2 +updates: + - package-ecosystem: "gradle" + directory: "/" + schedule: + interval: "weekly" + groups: + minor: + update-types: + - "minor" + - "patch" + patterns: + - "*" + + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + groups: + minor: + update-types: + - "minor" + - "patch" + patterns: + - "*" diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml new file mode 100644 index 000000000..3849b0649 --- /dev/null +++ b/.github/workflows/dependabot.yml @@ -0,0 +1,22 @@ +# Automated management of Dependabot PRs +name: Dependabot +on: pull_request + +permissions: + contents: write + pull-requests: write + +jobs: + dependabot: + runs-on: ubuntu-latest + if: github.actor == 'dependabot[bot]' + steps: + - uses: actions/create-github-app-token@v1 + id: app-token + with: + app-id: ${{ secrets.BOT_APP_ID }} + private-key: ${{ secrets.BOT_APP_PRIVATE_KEY }} + + - uses: ministryofjustice/hmpps-probation-integration-services/.github/actions/dependabot-automerge@main + with: + token: ${{ steps.app-token.outputs.token }}