dependabot_changelog_update.yml

name: Generate changelog entry for Dependabot

on:
  pull_request:
    types:
      - opened
      - synchronize
      - reopened
jobs:
  dependabot-changelog-update:
    if: github.actor == 'dependabot[bot]'
    runs-on: ubuntu-latest
    steps:
      - name: Generate a GitHub token
        id: github-token
        uses: actions/create-github-app-token@v3
        with:
          app-id: ${{ vars.GH_APP_ID }}
          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
          owner: ${{ github.repository_owner }}
          repositories: "go-fastly"
      - name: Checkout code
        uses: actions/checkout@v6
        with:
          token: ${{ steps.github-token.outputs.token }}
          repository: ${{ github.event.pull_request.head.repo.full_name }}
          ref: ${{ github.event.pull_request.head.ref }}
      - name: Generate changelog entry
        uses: dangoslen/dependabot-changelog-helper@v4
        with:
          activationLabels: dependencies
          changelogPath: './CHANGELOG.md'
          entryPrefix: 'build(deps): '
      - name: Commit changelog entry
        uses: stefanzweifel/git-auto-commit-action@v7
        with:
          commit_message: "docs(CHANGELOG.md): add dependency bump from dependabot"