auto-merge.yml

name: "Auto-merge Dependabot Pull Request for Dockerfile updates"

permissions:
  pull-requests: write
  contents: write

on:
  pull_request_target:
    branches:
      - main
    types:
      - labeled

jobs:
  automerge:
    runs-on: ubuntu-latest
    if: |
      github.actor == 'dependabot[bot]'
      && github.ref == 'refs/heads/main'
      && startsWith(github.head_ref, 'dependabot/docker/')
    steps:
      - name: "Fetch Dependabot metadata"
        id: dependabot-metadata
        uses: dependabot/fetch-metadata@v1
        with:
          github-token: "${{ secrets.GITHUB_TOKEN }}"
      - name: "Auto-merge Dependabot Pull Request"
        if: |
          contains(steps.dependabot-metadata.outputs.dependency-names, 'ubi') 
        run: gh pr merge --auto --merge "${PR_URL}"
        env:
          PR_URL: "${{ github.event.pull_request.html_url }}"
          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"

dependabot.yml

version: 2
updates:
  - package-ecosystem: "docker"
    directory: "/"
    schedule:
      interval: "daily"
      time: "05:00"
      timezone: "Asia/Tokyo"
    target-branch: "main"
    labels:
      - "dependencies"