e Dependabot

Author: jonreid

.github/dependabot.yml

@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"

.github/workflows/build.yml

@@ -78,3 +78,20 @@ jobs:
         uses: actions/checkout@v3
       - name: Lint the pod spec
         run: pod spec lint --quick
+
+  auto-merge:
+    needs: [ buildSwiftPackage, buildCarthage, podspec ]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out repo
+        uses: actions/checkout@v3
+      - name: auto-merge
+        if: |
+          github.actor == 'dependabot[bot]' &&
+          github.event_name == 'pull_request'
+        run: |
+          ./merge_dependabot.sh
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          # this secret needs to be in the settings.secrets.dependabot
+          GITHUB_TOKEN: ${{secrets.GH_ACTION_TOKEN}}

merge_dependabot.sh

@@ -0,0 +1,9 @@
+#!/bin/sh
+
+gh pr merge --auto --rebase "$PR_URL"
+
+if [ $? -ne 0 ]
+then
+    echo 'if you want github to automatically merge pull requests from dependabot, you need to create a'
+    echo 'personal access token (public_repo) and assign it to settings -> secrets -> dependabot -> GH_ACTION_TOKEN'
+fi