The best way I've found to automatically merge Dependabot PRs is to use
actions/github-script to comment
@dependabot merge
on Dependabot PRs. There are a few reasons why I think this
approach makes sense:
-
Commenting
@dependabot merge
on a Dependabot PR instructs Dependabot to merge the PR after tests (if any) pass, so we don't need to encode that dependency in a workflow file. -
Unlike using an auto-merge action, nothing happens if the workflow runs on a