From dcb17c2bbb954bc4f41b59e840d4f97d80afdb95 Mon Sep 17 00:00:00 2001
From: Marco Pivetta <ocramius@gmail.com>
Date: Sun, 19 Sep 2021 05:21:34 +0200
Subject: [PATCH] Added dependabot and auto-merge for it

---
 .github/dependabot.yml                        | 25 +++++++++++++++++++
 .../workflows/merge-dependabot-upgrades.yml   | 23 +++++++++++++++++
 2 files changed, 48 insertions(+)
 create mode 100644 .github/dependabot.yml
 create mode 100644 .github/workflows/merge-dependabot-upgrades.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..4ae74ece
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,25 @@
+{
+  "version": 2,
+  "updates": [
+    {
+      "allow": [
+        {
+          "dependency-type": "all"
+        }
+      ],
+      "directory": "/",
+      "package-ecosystem": "composer",
+      "schedule": {
+        "interval": "daily"
+      },
+      "versioning-strategy": "increase"
+    },
+    {
+      "directory": "/",
+      "package-ecosystem": "github-actions",
+      "schedule": {
+        "interval": "daily"
+      }
+    }
+  ]
+}
diff --git a/.github/workflows/merge-dependabot-upgrades.yml b/.github/workflows/merge-dependabot-upgrades.yml
new file mode 100644
index 00000000..3baf8323
--- /dev/null
+++ b/.github/workflows/merge-dependabot-upgrades.yml
@@ -0,0 +1,23 @@
+# See https://github.com/ridedott/merge-me-action/
+# This workflow automates merges from patches sent by Dependabot, and
+# only by dependabot, once the other CI workflows pass
+name: Auto-merge Dependabot PRs
+
+on:
+  workflow_run:
+    types:
+      - completed
+    workflows:
+      - "Continuous Integration"
+
+jobs:
+  merge-me:
+    name: Auto-merge Dependabot PRs
+    runs-on: ubuntu-latest
+    steps:
+      - name: Auto-Merge
+        if: ${{ github.event.workflow_run.conclusion == 'success' }}
+        uses: ridedott/merge-me-action@v2.9.35
+        with:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          MERGE_METHOD: MERGE