{"id":22800973,"url":"https://github.com/dailydevops/dependamerge-action","last_synced_at":"2025-06-18T22:41:50.761Z","repository":{"id":213615019,"uuid":"734477861","full_name":"dailydevops/dependamerge-action","owner":"dailydevops","description":"GitHub action that automatically validates, approves and merges pull requests for branches created by dependabot[bot].","archived":false,"fork":false,"pushed_at":"2025-04-28T14:07:42.000Z","size":1562,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-04-28T15:26:32.526Z","etag":null,"topics":["actions","dependabot","dependabot-auto-merge"],"latest_commit_sha":null,"homepage":"https://dailydevops.net","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/dailydevops.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null},"funding":{"github":["samtrion"]}},"created_at":"2023-12-21T19:33:28.000Z","updated_at":"2025-04-28T14:07:45.000Z","dependencies_parsed_at":"2024-01-02T13:57:34.432Z","dependency_job_id":"0c5cfe54-67c2-4e28-ad2e-3cfdfec07828","html_url":"https://github.com/dailydevops/dependamerge-action","commit_stats":null,"previous_names":["dailydevops/dependamerge-action"],"tags_count":15,"template":false,"template_full_name":"actions/javascript-action","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dailydevops%2Fdependamerge-action","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dailydevops%2Fdependamerge-action/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dailydevops%2Fdependamerge-action/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dailydevops%2Fdependamerge-action/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/dailydevops","download_url":"https://codeload.github.com/dailydevops/dependamerge-action/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":251774817,"owners_count":21641729,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["actions","dependabot","dependabot-auto-merge"],"created_at":"2024-12-12T08:08:33.246Z","updated_at":"2025-04-30T20:00:19.341Z","avatar_url":"https://github.com/dailydevops.png","language":"JavaScript","readme":"# DependaMerge - GitHub Action\n\nGitHub Action that processes pull requests created and processed by\n[dependabot[bot]](https://github.com/dependabot). Depending on the settings, the\npull request is approved and/or merged. The action is triggered by the\n`pull_request` event and only processes pull requests created by\n[dependabot[bot]](https://github.com/dependabot).\n\n## Usage\n\nThe simplest variant of the pipeline configuration could look like this.\nHowever, it is recommended to link this job with a build and test process. This\nensures that the code is tested before it is merged.\n\n```yaml\nname: DependaMerge\n\non:\n pull_request:\n\njobs:\n dependabot:\n runs-on: ubuntu-latest\n steps:\n - uses: actions/checkout@v2\n\n - name: DependaMerge\n uses: dailydevops/dependamerge-action@v1\n with:\n token: ${{ secrets.GITHUB_TOKEN }}\n command: squash # Not required, default is squash\n approve-only: false # Not required, default is false\n handle-submodule: false # Not required, default is false\n handle-dependency-group: true # Not required, default is true\n target: patch # Not required, default is patch\n skip-commit-verification: false # Not required, default is false\n skip-verification: false # Not required, default is false\n```\n\n### Inputs\n\n| Name | Description | Required | Default | Available Values |\n| -------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | :------: | ----------------------------- | -------------------------------- |\n| `token` | GitHub token | ✔ | `${{ secrets.GITHUB_TOKEN }}` | --- |\n| `command` | Merge Method with which the pull request is to be merged.\u003cbr/\u003e\u003cbr/\u003eCommand `squash` is the default command. All commits are squashed into one commit and merged into the target branch.\u003cbr /\u003eCommand `merge` merges the pull request with the target branch, keeping the commit history.\u003cbr /\u003eCommand `rebase` only checks whether the PR is behind the current compare branch, if so, the PR is rebased. | ❌ | `squash` | `squash`, `merge`, `rebase` |\n| `approve-only` | If `true`, then the pull request is only approved, but not merged. | ❌ | `false` | `true`, `false` |\n| `handle-submodule` | If `true`, Git submodules are also merged. | ❌ | `false` | `true`, `false` |\n| `handle-dependency-group` | If `true`, all pull requests of a dependency group are merged. | ❌ | `true` | `true`, `false` |\n| `target` | The maximum target of the version comparison to be merged. | ❌ | `patch` | `major`, `minor`, `patch`, `any` |\n| `skip-commit-verification` | If `true`, then the action will not expect the commits to have a verification signature. It is required to set this to true in GitHub Enterprise Server. | ❌ | `false` | `true`, `false` |\n| `skip-verification` | If `true`, the action will not validate the user or the commit verification status. | ❌ | `false` | `true`, `false` |\n\n### Outputs\n\n#### Output `state`\n\n| Value | Description |\n| ---------- | ----------------------------------------------------------------- |\n| `approved` | The pull request has been approved. |\n| `merged` | The pull request has been merged. |\n| `skipped` | The pull request is skipped and all processing steps are stopped. |\n| `failed` | The pull request could not be processed. |\n| `rebased` | The pull request was automatically rebased. |\n\n#### Output `message`\n\nThe message contains further information about the processing state of the pull\nrequest. In some cases it contains error/debug information.\n","funding_links":["https://github.com/sponsors/samtrion"],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdailydevops%2Fdependamerge-action","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdailydevops%2Fdependamerge-action","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdailydevops%2Fdependamerge-action/lists"}