From 3d8194aa168665a0cf8fc4b85bdf78a3cf97db32 Mon Sep 17 00:00:00 2001 From: Mark Waite Date: Fri, 15 May 2026 12:43:34 -0600 Subject: [PATCH] Automerge safe dependencies Simplify dependency management by automatically merging safe dependencies. Automatically closes pull requests for plugin BOM updates if they pass automated tests. That avoids dependency updates in the plugin that might make other maintenance more difficult. Uses the GitHub Action defined in pull request: * https://github.com/jenkins-infra/github-reusable-workflows/pull/48 The pull request is associated with GitHub issue: * https://github.com/jenkins-infra/github-reusable-workflows/issues/35 Testing done: * None. Rely on testing done in other repositories --- .github/workflows/auto-merge-safe-deps.yml | 9 +++++++++ .github/workflows/close-bom-if-passing.yml | 11 +++++++++++ 2 files changed, 20 insertions(+) create mode 100644 .github/workflows/auto-merge-safe-deps.yml create mode 100644 .github/workflows/close-bom-if-passing.yml diff --git a/.github/workflows/auto-merge-safe-deps.yml b/.github/workflows/auto-merge-safe-deps.yml new file mode 100644 index 0000000..c97bcc4 --- /dev/null +++ b/.github/workflows/auto-merge-safe-deps.yml @@ -0,0 +1,9 @@ +name: Automatically approve and merge safe dependency updates +on: + - pull_request_target +permissions: + contents: write + pull-requests: write +jobs: + auto-merge-safe-deps: + uses: jenkins-infra/github-reusable-workflows/.github/workflows/auto-merge-safe-deps.yml@v1 diff --git a/.github/workflows/close-bom-if-passing.yml b/.github/workflows/close-bom-if-passing.yml new file mode 100644 index 0000000..79a2d34 --- /dev/null +++ b/.github/workflows/close-bom-if-passing.yml @@ -0,0 +1,11 @@ +name: Close BOM update PR if passing +on: + check_run: + types: + - completed +permissions: + contents: read + pull-requests: write +jobs: + close-bom-if-passing: + uses: jenkins-infra/github-reusable-workflows/.github/workflows/close-bom-if-passing.yml@v1