dependabot_automerge.yml

# Set permissions to auto-merge updates.
# Note: this is not very secure. 
# Other note: Most actions that claim to do this are broken, many hour spent here
# https://github.com/marketplace/actions/github-action-merge-dependabot
name: automerge
on: [pull_request]

jobs:
  automerge:
    runs-on: ubuntu-latest

    permissions:
      pull-requests: write
      contents: write

    steps:
      - uses: fastify/github-action-merge-dependabot@v3.0.0
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}

# broke as hecc
# name: Dependabot auto-merge
# on: pull_request

# permissions:
#   contents: write

# jobs:
#   dependabot:
#     runs-on: ubuntu-latest
#     if: ${{ github.actor == 'dependabot[bot]' }}
#     steps:
#       - name: Dependabot metadata
#         id: metadata
#         uses: dependabot/fetch-metadata@v1.1.1
#         with:
#           github-token: "${{ secrets.GITHUB_TOKEN }}"
#       - name: Enable auto-merge for Dependabot PRs
#         run: gh pr merge --auto --merge "$PR_URL"
#         env:
#           PR_URL: ${{github.event.pull_request.html_url}}
#           GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}