Auto approve and merge the pull requests raised by dependabot

[J-DK]

Is your feature request related to a problem? Please describe.

As the dependabot bumps the versions of different dependencies regularly, it is difficult for the project owner to review, approve, rebase, merge the PR.

Describe the solution you'd like

Automate the above process with github actions

[J-DK]

I have done this automation in few other repositories and it really saved a lot of time.

[vincent-fuchs]

do you have a link showing how to do that automation ? (I don't receive so many Dependabot PRs for now though)

[J-DK]

Hi @vincent-fuchs , I have written a blog about how to achieve it.

[acourtiol]

Hi @vincent-fuchs @J-DK, There's no need of a GitHub action to allow dependabot to automatically merge certain dependencies updates, see below:

If you want I can take care of it, there's multiple policies based on the semver:

• security patch only
• all patch
• minors
• in-range
• all

[paul58914080]

@acourtiol I wasn't aware of this. Thank you for sharing.

[paul58914080]

I did a bit of study and found that this wouldn't work if we have protected branch settings. More about this issue is mentioned in https://github.com/dependabot/feedback/issues/86. We may probably need https://github.com/hmarr/auto-approve-action along with permissions(in case we have enabled the settings of protected branch). I do not have the view of settings.