From ce4513b13a0355e159547dc98b92068567af7350 Mon Sep 17 00:00:00 2001
From: Geert Eltink <9497586+geerteltink@users.noreply.github.com>
Date: Sat, 16 Apr 2022 11:01:22 +0200
Subject: [PATCH] ci: configure dependabot (#36)

---
 .github/dependabot.yml                     | 20 ++++++++++++++++++
 .github/workflows/automerge-dependabot.yml | 24 ++++++++++++++++++++++
 2 files changed, 44 insertions(+)
 create mode 100644 .github/dependabot.yml
 create mode 100644 .github/workflows/automerge-dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..61a5bdc
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,20 @@
+version: 2
+updates:
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    open-pull-requests-limit: 20
+    labels:
+      - "dependencies"
+
+  - package-ecosystem: composer
+    directory: "/"
+    schedule:
+      interval: "daily"
+    open-pull-requests-limit: 20
+    allow:
+      - dependency-type: "all"
+    labels:
+      - "dependencies"
diff --git a/.github/workflows/automerge-dependabot.yml b/.github/workflows/automerge-dependabot.yml
new file mode 100644
index 0000000..b9cad34
--- /dev/null
+++ b/.github/workflows/automerge-dependabot.yml
@@ -0,0 +1,24 @@
+# See https://github.com/ridedott/merge-me-action/
+# This workflow automates merges from patches sent by Dependabot, and
+# only by dependabot, once the other CI workflows pass
+name: automerge-dependabot
+
+on:
+  workflow_run:
+    types:
+      - completed
+    workflows:
+      - "Continuous Integration"
+
+jobs:
+  automerge:
+    name: Auto-merge Dependabot PRs
+    runs-on: ubuntu-latest
+    steps:
+      - name: Auto merge
+        if: ${{ github.event.workflow_run.conclusion == 'success' }}
+        uses: ridedott/merge-me-action@v2
+        with:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          MERGE_METHOD: SQUASH
+          PRESET: DEPENDABOT_MINOR