auto-merge-release-updates.yml

name: Dependabot auto-merge release-updates
on: pull_request

# Based on https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions#enable-auto-merge-on-a-pull-request
permissions:
  pull-requests: write
  contents: write

jobs:
  dependabot:
    runs-on: ubuntu-latest
    if: ${{ github.actor == 'dependabot[bot]' }}
    steps:
      - name: Dependabot metadata
        id: metadata
        uses: dependabot/fetch-metadata@v1.3.5
        with:
          github-token: "${{ secrets.GITHUB_TOKEN }}"
      - uses: actions/checkout@v3
        name: Clone self repository
        with:
          ref: ${{ github.head_ref }}
          submodules: true
      - uses: actions/setup-python@v4
        with:
          python-version: '3.10'
      - name: Install Python Dependencies
        run: pip install -r requirements.txt
      - name: Update latest releases
        id: latest
        run: python _auto/latest.py
      - uses: stefanzweifel/git-auto-commit-action@v4
        name: Update latest and latestReleaseDate
        with:
          file_pattern: products/*
          commit_message: "🤖: Update latest release data"
          status_options: '--untracked-files=no'
          commit_author: 'github-actions[bot] <github-actions[bot]@users.noreply.github.com>'
      # TODO: Leave a comment if there is a new major release that we don't match
      - name: Enable auto-merge for Dependabot PRs for release data
        if: ${{contains(steps.metadata.outputs.dependency-names, '_data/release-data')}}
        run: gh pr merge --auto --rebase "$PR_URL"
        env:
          PR_URL: ${{github.event.pull_request.html_url}}
          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
      - name: Comment on PR about missing releases
        uses: github-actions-up-and-running/pr-comment@v1.0.1
        with:
          repo-token: ${{ secrets.GITHUB_TOKEN }}
          message: |
            :warning: The following recent releases are not listed:
            ```
            ${{ steps.latest.outputs.warning }}
            ```