Skip to content
Dependabot

fix: bump bandit[toml] from 1.7.5 to 1.7.7 #2

Sign in to view logs

fix: bump bandit[toml] from 1.7.5 to 1.7.7

fix: bump bandit[toml] from 1.7.5 to 1.7.7 #2

Workflow file for this run

.github/workflows/dependabot.yml at dac6c49
name: Dependabot
on:
pull_request:
workflow_dispatch:
permissions:
contents: write
jobs:
dependabot:
runs-on: ubuntu-latest
if: ${{ github.actor == 'dependabot[bot]' }}
env:
PR_URL: ${{github.event.pull_request.html_url}}
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
steps:
- name: approve
run: gh pr review --approve "$PR_URL"
- name: merge
run: gh pr merge --auto --squash --delete-branch "$PR_URL"