Skip to content
Dependabot auto-merge

chore(deps): bump source-map-js from 1.2.1 to 1.2.2 #21

Sign in to view logs

chore(deps): bump source-map-js from 1.2.1 to 1.2.2

chore(deps): bump source-map-js from 1.2.1 to 1.2.2 #21

Workflow file for this run

.github/workflows/dependabot-auto-merge.yml at 035ee23
name: Dependabot auto-merge

Check warning on line 1 in .github/workflows/dependabot-auto-merge.yml

View workflow run for this annotation

GitHub Actions / Dependabot auto-merge

Workflow execution policy warning (evaluate mode) 

On November 2, 2026, GitHub will restrict `pull_request_target` on public repositories by default. To continue allowing the event trigger, configure an Actions policy. Learn more: https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target
on: pull_request_target
permissions:
contents: write
pull-requests: write
jobs:
auto-merge:
if: github.actor == 'dependabot[bot]'
runs-on: ubuntu-latest
steps:
- uses: dependabot/fetch-metadata@v3
id: metadata
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
- if: steps.metadata.outputs.update-type != 'version-update:semver-major'
run: gh pr merge --auto --squash "$PR_URL"
env:
PR_URL: ${{ github.event.pull_request.html_url }}
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}