[ISSUE apache#130] Auto-approve Dependabot PR only and Disable PR up-…

…to-date check (apache#131)

* No need to force up-to-date

* Auto-approve only

* Remove the slash at the end of the homepage url in Repo GitHub desc

.asf.yaml

@@ -22,7 +22,7 @@ github:
     issues: true
     # Enable wiki
     wiki: true
-  homepage: https://eventmesh.apache.org/
+  homepage: https://eventmesh.apache.org
   labels:
     - pubsub
     - event-mesh
@@ -40,7 +40,7 @@ github:
   protected_branches:
     main:
       required_status_checks:
-        strict: true
+        strict: false
         contexts:
           - dependency-review
           - Build (ubuntu-latest, 8, java)

.github/workflows/auto-dependabot.yml

@@ -15,8 +15,8 @@
 # limitations under the License.
 #
 
-name: Dependabot auto-merge
-on: pull_request
+name: Dependabot Auto-approve
+on: pull_request_target
 
 permissions:
   contents: write
@@ -38,13 +38,5 @@ jobs:
       - name: Approve PR
         run: gh pr review --approve "$PR_URL"
         env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
-
-      # comment '@dependabot merge' to merge the PR
-      - name: Comment and Merge PR
-        if: steps.metadata.outputs.update-type == 'version-update:semver-patch'
-        run: gh pr comment $PR_URL -b "@dependabot merge"
-        env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}