diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index 43323e2..0000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,16 +0,0 @@ -# Auto-update dependencies. -# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/about-dependabot-version-updates - -version: 2 - -updates: - - package-ecosystem: cargo - directory: "/" - schedule: - interval: "daily" # daily, weekly, or monthly - open-pull-requests-limit: 10 - # ignore: - # - dependency-name: example-crate - # versions: - # - 0.1.0 - diff --git a/.github/workflows/dependabot_automerge.yml b/.github/workflows/dependabot_automerge.yml deleted file mode 100644 index 5ad4633..0000000 --- a/.github/workflows/dependabot_automerge.yml +++ /dev/null @@ -1,42 +0,0 @@ -# Set permissions to auto-merge updates. -# Note: this is not very secure. -# Other note: Most actions that claim to do this are broken, many hour spent here -# https://github.com/marketplace/actions/github-action-merge-dependabot -name: automerge -on: [pull_request] - -jobs: - automerge: - runs-on: ubuntu-latest - - permissions: - pull-requests: write - contents: write - - steps: - - uses: fastify/github-action-merge-dependabot@v3.0.0 - with: - github-token: ${{ secrets.GITHUB_TOKEN }} - -# broke as hecc -# name: Dependabot auto-merge -# on: pull_request - -# permissions: -# contents: write - -# jobs: -# dependabot: -# runs-on: ubuntu-latest -# if: ${{ github.actor == 'dependabot[bot]' }} -# steps: -# - name: Dependabot metadata -# id: metadata -# uses: dependabot/fetch-metadata@v1.1.1 -# with: -# github-token: "${{ secrets.GITHUB_TOKEN }}" -# - name: Enable auto-merge for Dependabot PRs -# run: gh pr merge --auto --merge "$PR_URL" -# env: -# PR_URL: ${{github.event.pull_request.html_url}} -# GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}