Auto-merge Dependabot PRs

Author: FlorianPfaff

.github/workflows/dependabot-auto-merge.yml

@@ -0,0 +1,45 @@
+name: Auto-merge Dependabot PRs
+
+# Specify which events trigger this workflow
+on:
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+  check_suite:
+    types:
+      - completed
+
+# Restrict permissions to what is needed
+permissions:
+  pull-requests: write
+  statuses: read
+
+jobs:
+  auto-merge:
+    runs-on: ubuntu-latest
+    if: |
+      github.event.pull_request.user.login == 'dependabot[bot]' ||
+      github.event.pull_request.user.login == 'dependabot-preview[bot]'
+    env:
+      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Check if all checks passed
+        run: |
+          if [[ -z "${{ github.event.check_suite.conclusion }}" || "${{ github.event.check_suite.conclusion }}" != "success" ]]; then
+            echo "Checks not successful or invalid state, skipping merge."
+            exit 0
+          fi
+
+      - name: Auto-merge if checks passed
+        run: |
+          gh pr merge ${{ github.event.pull_request.number }} --squash --auto --repo ${{ github.repository }}
+
+      - name: Comment on PR if merged
+        run: |
+          gh pr comment ${{ github.event.pull_request.number }} --body "This PR has been automatically merged as all checks passed."