From 95b3d6a59ce3d63e731d949e0a59b66cb32d6e6d Mon Sep 17 00:00:00 2001 From: Dmytro Pashynskyi <61313167+dspashynskyi@users.noreply.github.com> Date: Mon, 17 Nov 2025 22:18:39 +0200 Subject: [PATCH 1/2] chore: fine-tune Dependabot for GitHub actions --- .github/CODEOWNERS | 2 +- .github/dependabot.yml | 12 +++++++++ .github/workflows/dependabot-automation.yml | 29 +++++++++++++++++++++ 3 files changed, 42 insertions(+), 1 deletion(-) create mode 100644 .github/workflows/dependabot-automation.yml diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 0ef014d..7a8f93f 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -1,2 +1,2 @@ -* @adubovik @roman-romanov-o +* @adubovik /.github/ @nepalevov @alexey-ban \ No newline at end of file diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 85fa281..c329bcb 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -20,3 +20,15 @@ updates: commit-message: # Prefix all commit messages with "chore: " prefix: "chore" + groups: + ai-dial-ci: + applies-to: version-updates + patterns: + - "epam/ai-dial-ci/*" + github-actions: + applies-to: version-updates + patterns: + - "*" + exclude-patterns: + - "epam/ai-dial-ci/*" + open-pull-requests-limit: 10 diff --git a/.github/workflows/dependabot-automation.yml b/.github/workflows/dependabot-automation.yml new file mode 100644 index 0000000..c1fad4c --- /dev/null +++ b/.github/workflows/dependabot-automation.yml @@ -0,0 +1,29 @@ +name: Dependabot Automation + +on: pull_request_target + +permissions: {} + +jobs: + dependabot: + runs-on: ubuntu-latest + if: | + github.event.pull_request.user.login == 'dependabot[bot]' && + github.repository_owner == 'epam' + steps: + - name: Dependabot metadata + id: metadata + uses: dependabot/fetch-metadata@08eff52bf64351f401fb50d4972fa95b9f2c2d1b # v2.4.0 + - name: Approve PR + run: gh pr review --approve "$PR_URL" + env: + PR_URL: ${{ github.event.pull_request.html_url }} + GH_TOKEN: ${{ secrets.ACTIONS_BOT_TOKEN }} + - name: Merge PR + if: | + steps.metadata.outputs.dependency-group == 'ai-dial-ci' && + steps.metadata.outputs.update-type != 'version-update:semver-major' + run: gh pr merge --auto --squash "$PR_URL" + env: + PR_URL: ${{ github.event.pull_request.html_url }} + GH_TOKEN: ${{ secrets.ACTIONS_BOT_TOKEN }} \ No newline at end of file From ed66faf36d5b4382cb3a8781e33657f5cfbdd823 Mon Sep 17 00:00:00 2001 From: Dmytro Pashynskyi <61313167+dspashynskyi@users.noreply.github.com> Date: Mon, 17 Nov 2025 22:19:01 +0200 Subject: [PATCH 2/2] chore: add new line --- .github/workflows/dependabot-automation.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependabot-automation.yml b/.github/workflows/dependabot-automation.yml index c1fad4c..40b632e 100644 --- a/.github/workflows/dependabot-automation.yml +++ b/.github/workflows/dependabot-automation.yml @@ -26,4 +26,4 @@ jobs: run: gh pr merge --auto --squash "$PR_URL" env: PR_URL: ${{ github.event.pull_request.html_url }} - GH_TOKEN: ${{ secrets.ACTIONS_BOT_TOKEN }} \ No newline at end of file + GH_TOKEN: ${{ secrets.ACTIONS_BOT_TOKEN }}